Inside of the app's submission flow, see "Steps to reproduce the issue".
Please note that these are the steps on an iOS Device with CWA version 1.15.2.
The app shows this screen after registering a QR code and doing the steps described above. It says
"Consent
If you have tested positive for coronavirus, the app will share your test result in order to warn other users whom you have encountered."
If the user now deactivates the toggle on the top ("Warn Others"), the app still shows the same text. The user could think that the app will still automatically share the test result, although he revoked his consent or never gave it.
Change the text to something like
EN: "By enabling "Warn Others" above, you consent to the following:"
DE: "Indem Sie oben "Andere warnen" aktivieren, willigen Sie ein:"
This is how the consent is formulated in the "Data Donation" settings.
This affects both, English and German.
English string in the iOS repository (release/2.0.x): https://github.com/corona-warn-app/cwa-app-ios/blob/cbff9d62deae78370f4e912b62fd901252f78226/src/xcode/ENA/ENA/Resources/Localization/en.lproj/Localizable.legal.strings#L46
German string in the iOS repository (release/2.0.x): https://github.com/corona-warn-app/cwa-app-ios/blob/cbff9d62deae78370f4e912b62fd901252f78226/src/xcode/ENA/ENA/Resources/Localization/de.lproj/Localizable.legal.strings#L46
English string in the Android repository (release/2.0.x): https://github.com/corona-warn-app/cwa-app-android/blob/ae87cd41a1d48531dae0c749d8406632501d432f/Corona-Warn-App/src/main/res/values/legal_strings.xml#L27
German string in the Android repository (release/2.0.x): https://github.com/corona-warn-app/cwa-app-android/blob/ae87cd41a1d48531dae0c749d8406632501d432f/Corona-Warn-App/src/main/res/values-de/legal_strings.xml#L26
Internal Tracking ID: EXPOSUREAPP-6232
@Ein-Tim Thanks. Internal Tracking ID: EXPOSUREAPP-6232
@Ein-Tim They have been looking into this issue already. Feedback:
This is the text which was agreed with the customer, the lawyers and BfDI. It should be clear for the user if he gave his consent or not. If he get's back to the previous screen, it's again clearly stated if consent was given or not.
We suggest closing this issue. Thanks anyway for contributing!
Interesting decision, I don't understand it, since every other "data privacy text" in the app has such a formulation, but okay...
Closing this, thanks @dsarkar!
@Ein-Tim Thanks a lot anyway!