Source: Privacy Commissioner
Privacy Commissioner John Edwards is concerned that people are gaining access to personal information from paper-based contact tracing registers and using it in ways that breach peoples privacy. The Governments introduction of mandatory record keeping requires businesses todisplay a QR Code and have an alternative record keeping system, enabling them to collect contact tracing records in a privacy-protective way. Ensuring businesses record keeping systems protect peoples privacy is a legal requirement under Privacy Act 2020.
Mr Edwards says although most organisations and businesses know they need to provide a manual alternative to the QR Code, many are using paper registers that leave peoples contact details visible to members of the public. Using an open sheet or register left in a public-facing position where personal information is visible to others is a leading cause of COVID-19-related privacy breaches.