Respecting privacy in the context of mobile phone tracking and Covid-19

Mobile phone data can be used to directly collect and indirectly infer information about people’s behaviors, contexts, and psychological characteristics. Who gets to set the boundaries for disclosure of this personal information?