Recently, the AEPD (Agencia Española de Protección de Datos) released information about the protection of data in Coronavirus self-assessment apps and websites.
In the current health emergency situation arising from the extension of Covid-19, initiatives are being developed that involve a high volume of personal data processing activities and, in particular, sensitive data such as health data.
The AEPD has found that initiatives are being launched, both from the public and private spheres, that request that citizens to provide them with personal information, mainly related to their health, under the emergency our country lives. These initiatives have a broad spectrum, from local to global, and use apps or web pages. In view of this situation, they recall the criteria that must be applied for the processing of personal data to be lawful.
More detailed information you can find here.