In their battle against COVID-19, several governments and their partners are leveraging technology to collect, process, share, and store data about citizens. As governments turn their attention to recovery, the post-COVID scenario is threatened with enormous privacy and surveillance risks. This report outlines the components of an ethical approach that security, risk, and privacy professionals in governments and in their partners' organizations must follow to protect citizens' privacy while fighting their way out of the crisis.