PROTECTING PRIVACY IN A PANDEMIC