Businesses told to enforce Covid-19 scanning


Once lockdown restrictions finally ease and businesses are able to re-open, they will have seven days to take steps ensuring all visitors comply with mandatory scanning and record keeping, the University of Auckland’s Dr Andrew Chen explains

Contact tracing is a key epidemiological tool that helps us identify the right people who need to isolate or get tested.

The government’s announcement about mandatory recordkeeping for “busy places and events” (which translates roughly to the language of “higher-risk venues” that is used in overseas jurisdictions) at all alert levels is an important and significant step.

The list given in the press conference includes “cafes, restaurants, bars, casinos and concerts, aged care, healthcare facilities (excluding patients), barbers, exercise facilities, nightclubs, libraries, courts, local and central government agencies, and social services providers with customer service counters.”

Places where records are already kept and people are already required to sign in, like gyms and some workplaces, won’t need to adjust what they are already doing.

Those responsible for businesses and events will need to ensure people keep a record when they visit, either by scanning QR codes with the COVID-19 Tracer App or making a manual record. The obligation will be on the person responsible for the place or gathering to ensure people can scan or sign in.

The new rules will be introduced 7 days after we move down each alert level, applying to the set of venues that can open up at each level.

It is important to note that this announcement relates to mandatory recordkeeping, not QR code scanning specifically. Venues will also be required to have pen and paper options available.

It is important that businesses move away from using sheets of paper on clipboards, and use ballot boxes where available. With the sheets of paper, anyone can read the details of other people who have signed-in already, which can lead to some of the privacy breaches we saw last year with serious consequences.

With the ballot box, individuals write their details on a small slip of paper, and then drop them into a box (like an election box) so that other members of the public cannot easily access them.

Venues can then clear the box once a day, putting the slips of paper into a bag with the date on it in case they are needed by contact tracers later on, or otherwise discarding them after 60 days.

The government has a ballot box template here.

Business owners and those organising events will also be concerned about enforcement of recordkeeping. At this stage, the onus falls on them and their staff to enforce it – clearer guidance will need to be provided by the government on how those staff deal with people who insist on not providing their details.

If it is too restrictive (e.g. people are turned away), there may be human rights implications if this means people cannot access services that provide basic needs.

A common-sense balance needs to be struck between keeping the community safe, and not further antagonising those who choose not to comply.

This is an opportunity for the government to introduce legislation that protects the data collected through digital contact tracing platforms to ensure that it can only ever be used for contact tracing purposes.

While New Zealand Police have stated that they “have not, and will not” use NZ Covid Tracer data for law enforcement purposes, legislation to create stronger penalties for misuse would further assure New Zealanders that participation is safe.

Such legislation would also protect against employers or businesses misusing that data as well.

Is forced contact tracing necessary?

One of the big challenges with digital contact tracing in New Zealand has been the relatively low level of participation. Before the current outbreak of cases, only approximately 10% of New Zealand adults were scanning QR codes on a regular basis.

The Bluetooth Tracing participation rate was more promising (around 35-40%), but this is still not high enough to give us confidence that the data will cover any outbreak anywhere in the country.

Modelling from Te Pūnaha Matatini last year showed that we need at least 60%, and preferably 80%, of adults participating in digital contact tracing to have a meaningful impact on the reproducibility rate of COVID-19. With the delta variant, we need that participation rate to be higher than ever.

International evidence suggests that making recordkeeping mandatory is the strongest driver for increasing the participation rate. Some form of mandated recordkeeping has been in place in Australia at a State level, in Singapore, Qatar, China, India, and previously in the United Kingdom.

In New Zealand, we have seen evidence that even unenforced mandates (e.g. mask wearing on public transport) have a significant effect on behaviour, and that it sends a clear signal to the public on what the government expects is necessary for us to keep COVID-19 under control.

There are some risks that come with mandatory recordkeeping, but the government has the tools to mitigate many of them.

In the best-case scenario, we keep these records and then throw them away because we didn’t need them. But infected people and contacts having their records from before they get sick could make the difference between managing the outbreak successfully and the virus running out of control.

For more information: