The governance of personal data for COVID-19 response: perspective from the Access to COVID-19 Tools Accelerator