The Kerala government must take steps to protect the privacy of people and seek their consent before sharing COVID-19 data with an American company, the state's High Court ruled on Friday, as it heard a case challenging the contract that has drawn fierce criticism from the opposition.