Colorado Covid Notifications data

Todd Feathers filed this request with the Department of Public Health and Environment of Colorado.
Status
Completed

Communications

From: Todd Feathers

To Whom It May Concern:

Pursuant to the Colorado Open Records Act, I hereby request the following records:

1) Data documenting the number of times the CO Covid Notifications app was downloaded from the date the app was launched until the present. The department has publicly disclosed the existence of his data to multiple media outlets and during public press conferences (see: https://www.denverpost.com/2021/06/30/colorado-covid-exposure-notification-app/). I ask that this data be provided in the smallest timeframes available—i.e., downloads per day are preferred; if not available, then downloads per week; if not available, then downloads per month.

2) Data documenting the number of exposure codes issued by the CO Covid Notifications app from the date the app was launched until the present. The Department has publicly disclosed the existence of his data to multiple media outlets and during public press conferences (see: https://www.denverpost.com/2021/06/30/colorado-covid-exposure-notification-app/). I ask that this data be provided in the smallest timeframes available—i.e., downloads per day are preferred; if not available, then downloads per week; if not available, then downloads per month.

3) Aggregate analytics statistics from the Exposure Notifications Express (ENX) system—from the date the department began using the system until the present—for each of the metrics provided by the ENX system (see list below). Where possible, I ask that this data be provided in the smallest timeframes available—i.e., exposure notifications per day are preferred; if not available, then exposure notifications per week; if not available, then exposure notifications per month. For further explanations of the ENX metrics, please see: https://github.com/google/exposure-notifications-android/blob/master/doc/enexpress-analytics-faq.md.

ENX analytics metrics:
- "The number of exposure notifications sent in a public health authority’s region"
- "The number of user interactions (e.g., taps, dismissals) with exposure notifications in the region"
- "Histograms of the risk scores computed for users of the Exposure Notifications System in the region"
- "The number of exposure notifications sent in the past 14 days when verification codes are used in the region"
- "The number of exposure notifications sent in the past 14 days when temporary exposure keys are shared in the region"
- "Histograms of the number of days between having an exposure and receiving a notification"

Please note that the department and other participants in the CO Covid Notifications program and Exposure Notifications Express program have certified that the data and aggregate analytics available through these systems are privacy preserving and cannot be used to re-identify individuals.

I ask that all fees be waived as I am a journalist and intend to use the requested records to publish articles in the public interest. In the event you choose to impose fees, I request a detailed breakdown of the fees, including the hourly wage of each employee involved and an explanation justifying the employee hours required to fulfill the request.

Should you choose to reject this request or redact portions of it, I ask that you provide a detailed breakdown of the statutory exemptions and associated case law underlying your decision to withhold each/any portions from public review.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 3 business days, as the statute requires.

Sincerely,

Todd Feathers

From: Department of Public Health and Environment

Good afternoon,

The Colorado Department of Public Health and Environment is responding to
your request regarding:

“1) Data documenting the number of times the CO Covid Notifications app was
downloaded from the date the app was launched until the present. The
department has publicly disclosed the existence of his data to multiple
media outlets and during public press conferences (see:
https://www.denverpost.com/2021/06/30/colorado-covid-exposure-notification-app/
<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.denverpost.com_2021_06_30_colorado-2Dcovid-2Dexposure-2Dnotification-2Dapp_&d=DwQFaQ&c=sdnEM9SRGFuMt5z5w3AhsPNahmNicq64TgF1JwNR0cs&r=QDZPwcDfeoKi3WgmlwdlKRMa423EUKDcrUwbjxcUJi5tiOvIoPg7v_reS_eWRqmD&m=oh3OnQlVjXiRrUnYvOWnwiCDVi1qGBVRW1Vwt_AzU94&s=cZj2a6B6jTrgkfS9If8hdzcOH_9MNfkMd2GIgpoCGto&e=>).
I ask that this data be provided in the smallest timeframes available—i.e.,
downloads per day are preferred; if not available, then downloads per week;
if not available, then downloads per month.

2) Data documenting the number of exposure codes issued by the CO Covid
Notifications app from the date the app was launched until the present. The
Department has publicly disclosed the existence of his data to multiple
media outlets and during public press conferences (see:
https://www.denverpost.com/2021/06/30/colorado-covid-exposure-notification-app/
<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.denverpost.com_2021_06_30_colorado-2Dcovid-2Dexposure-2Dnotification-2Dapp_&d=DwQFaQ&c=sdnEM9SRGFuMt5z5w3AhsPNahmNicq64TgF1JwNR0cs&r=QDZPwcDfeoKi3WgmlwdlKRMa423EUKDcrUwbjxcUJi5tiOvIoPg7v_reS_eWRqmD&m=oh3OnQlVjXiRrUnYvOWnwiCDVi1qGBVRW1Vwt_AzU94&s=cZj2a6B6jTrgkfS9If8hdzcOH_9MNfkMd2GIgpoCGto&e=>).
I ask that this data be provided in the smallest timeframes available—i.e.,
downloads per day are preferred; if not available, then downloads per week;
if not available, then downloads per month.

3) Aggregate analytics statistics from the Exposure Notifications Express
(ENX) system—from the date the department began using the system until the
present—for each of the metrics provided by the ENX system (see list
below). Where possible, I ask that this data be provided in the smallest
timeframes available—i.e., exposure notifications per day are preferred; if
not available, then exposure notifications per week; if not available, then
exposure notifications per month. For further explanations of the ENX
metrics, please see:
https://github.com/google/exposure-notifications-android/blob/master/doc/enexpress-analytics-faq.md
<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_google_exposure-2Dnotifications-2Dandroid_blob_master_doc_enexpress-2Danalytics-2Dfaq.md&d=DwQFaQ&c=sdnEM9SRGFuMt5z5w3AhsPNahmNicq64TgF1JwNR0cs&r=QDZPwcDfeoKi3WgmlwdlKRMa423EUKDcrUwbjxcUJi5tiOvIoPg7v_reS_eWRqmD&m=oh3OnQlVjXiRrUnYvOWnwiCDVi1qGBVRW1Vwt_AzU94&s=seLiXIhUg-xR5JeSddtsSQBCLBDY11uuRHdO-8BQpdU&e=>
.

ENX analytics metrics:

- "The number of exposure notifications sent in a public health authority’s
region"

- "The number of user interactions (e.g., taps, dismissals) with exposure
notifications in the region"

- "Histograms of the risk scores computed for users of the Exposure
Notifications System in the region"

- "The number of exposure notifications sent in the past 14 days when
verification codes are used in the region"

- "The number of exposure notifications sent in the past 14 days when
temporary exposure keys are shared in the region"

- "Histograms of the number of days between having an exposure and
receiving a notification"

Regarding Item 1 of your request, please find the responsive record
attached.

Regarding Item 2 of your request, Staff have performed a preliminary review
and it is estimated that it will take approximately 3 hours of staff time
to retrieve and review the requested records. The estimated minimum cost
associated with fulfilling this portion of the records request is $90.00
($30 per hour) in accordance with the Department’s Open Records Act policy.

If you authorize these charges, please take the following actions:

1.

Notify us by email at cdphe_recordsrequests@state.co.us, and
2.

Submit your payment online <https://cdphe.colorado.gov/payrevenue> and
provide us a copy of your payment confirmation receipt. (Use “Records-OLRC”
as both the Customer Number/Reference ID and Invoice Number when
entering the required information)

Upon receipt of payment, staff will begin compiling the response. It may
be that this work can be accomplished in less than 3 hours; if this is the
case, the applicable portion of your deposit will be returned to you. It
may be that, upon further review, staff will determine that additional
document retrieval and/or review time is needed to respond to your
request. If that is the case, the Department will notify you prior to
performing the work.

During the review it may be determined that certain records or portions of
records are confidential or exempt from release. This estimate does not
include time and costs for creating a privilege log for records that are
not released. Creation of a privilege log is charged based upon actual
cost. If privileged records are identified and a privilege log was
requested, the Department will contact you regarding the estimated charges
prior to performing the work.

Records that were identified during the preliminary review will be retained
for 30 calendar days after the date of this estimate. If authorization and
payment as described above are not received within the 30-day timeframe,
records will be returned to their normal records retention cycles according
to Department policy.

Regarding Item 3 of your request: There are no responsive records for each
of the listed metrics. The department does not capture data according to
which county it was used in (“by region”). For your last item on the list,
the department does not record that information.

Thank you,

*CDPHE Records Unit*

4300 Cherry Creek Drive South, Denver, CO 80246
cdphe_recordsrequests@state.co.us <cdphe.recordsrequests@state.co.us> |
colorado.gov/cdphe

From: Todd Feathers

Thank you for your response. Just to clarify, the Department does not use the ENX system—referenced in items 3 and 4 of my request—provided by Google/Apple at all?

Todd

From: Department of Public Health and Environment

Hello Mr. Feathers,

The department uses the ENX system; however, Colorado has a decentralized
health authority. See
https://www.cdc.gov/publichealthgateway/sitesgovernance/index.html. ENX
information cannot be reported on a regional level within the state (the
level of region, referenced in item 3 of your request). Some information is
available on a statewide basis.

Further, regarding item 1 of your request, the Department identified a bug
in the information we previously released, which displayed an undercount
for iOS devices. Please find the updated record attached below.

This concludes the Department’s good faith response to your request.

Thank you,

*CDPHE Records Unit*

4300 Cherry Creek Drive South, Denver, CO 80246
cdphe_recordsrequests@state.co.us <cdphe.recordsrequests@state.co.us> |
colorado.gov/cdphe

From: Todd Feathers

I see, thank you very much.

I'll happily accept the state-level EDX data in lieu of the regional.

Todd

Files