After months of deliberation, federal officials announced Wednesday that Canada will be getting a COVID-19 vaccine passport for international travel that is expected to be ready in the fall.

Quebec will require its citizens to carry a “vaccine passport” as of Sept. 1 that would serve to exclude those who have not received two doses. Health Minister Christian Dubé stressed the passports would only be mandated in regions that experience outbreaks and would not be needed to access essential services.

Vaccine passports are being considered by some governments and businesses as a means of allowing a return to something more closely resembling normal life. Canada’s Privacy Commissioners have decided to make a statement at this time in an effort to ensure that privacy is considered at the earliest opportunity as part of any discussions about vaccine passport development.

Canada (and other countries) faces what can be called the data trilemma, whereby it is not possible to have simultaneously data that flows freely across borders, a high-trust data environment and a national data protection regime; one of these three objectives has to give so that only two are effectively possible at the same time. To resolve the data trilemma, Canada should work with its key economic partners — namely the European Union, Japan and the United States — to develop a single data area that would be managed by an international data standards board.