Next, the personal information collected, used or disclosed to alleviate public health effects of COVID-19 must not be used for other reasons. The data should also be de-identified whenever possible.