Risk management

States are understandably cautious to use new technology and new organizations like USDR. If something goes wrong with the finder, many vulnerable people may be affected. However, the mechanics behind building a vaccine appointment finder are low risk, because the tool is only scraping websites or making an API call, with read-only privileges, to a vaccine provider’s scheduler.

Vaccine appointment finders do not use or store any personal data from residents. The appointment finder directs residents to vaccine providers’ own websites with available appointments, but it’s still up to the provider to schedule the appointment. Therefore, the finder does not violate state’s robust data use restrictions. USDR has implemented this with several states. The risk must be measured against the public’s extreme need, and state’s must not let the risk mitigation process get in the way of this need.