This report looks at COVID-19 pandemic responses, focusing on the contact tracing apps from a business and human rights perspective. It sets out the human rights criteria when either interfering with the private life of individuals under the ordinary limitations of the right, and also when states choose to derogate having declared a state of emergency. The key tests remain the same: legality, necessity, and proportionality.