Businesses’ collection of information for coronavirus contact tracing raises privacy concerns for customers

Ellen Coulter | ABC news Online | October 28, 2020    

Questions are being raised over the privacy of coronavirus contact tracing at Tasmanian hospitality venues, amid allegations personal information is being used for promotional purposes.  

Key points:

• Customers have complained of receiving spam emails and text messages after leaving details for contact tracing
• Small businesses say they need government guidance on how to collect and use the information
• Tasmania’s Public Health department is looking at how contact tracing can be mandated

Some small businesses being asked to collect the data say they are not getting enough support from the State Government.

Public health authorities have encouraged pubs, restaurants and other businesses to collect the names and contact details of patrons to help with contact tracing in the event of a COVID-19 case.

An independent Tasmanian MP said she recently received advertising material after providing her personal details to a hospitality business.

Nelson MLC Meg Webb said she gave her information to the Hobart venue for contact-tracing purposes and received a promotional email from it the next day.

Ms Webb has chosen not to name the venue she visited, but said the incident raised questions about what constraints and requirements there were on businesses collecting and storing personal information.

“I felt that was a bit of a grey area, something that needed to be clarified for businesses to ensure that when we’re leaving our details in relation to COVID-19 requirements, that we’re really clear as customers and businesses … in terms of what they can do with it and how it’s used,” she said.

She said the State Government should give businesses a template to use, with a statement on how the collected information would be used.

“I think the Government has to set the standard here and make it as easy as possible because that’s the way we’re going to keep our protection really high as we open up our borders,” she said.

Ms Webb said she did not want to see Tasmanians become annoyed with promotional material and stop providing the correct information.

“People need to know that when they leave their personal details for the purposes of COVID-19 tracing that that’s what the information is going to be used for only, and that it won’t be used for other purposes,” Ms Webb said.

The head of the Tasmanian Hospitality Association, Steve Old, said he did not believe the issue was widespread, but was happy to work with the specific venue if Ms Webb released its details.

“While we appreciate the moral obligation of the use of patron details to an extent, it’s not exploiting any laws as far as we’re aware,” Mr Old said.

‘We’re making it up,’ pub owner says

Unlike capacity limits and rules prohibiting patrons from standing while drinking, collecting contact details is not mandatory for businesses.

Launceston pub owner Nick Daking said his business was doing its best to follow guidelines around contact tracing, but was not getting enough support from the Government.

“I’m referring to providing us with some forms, providing us with some advice and direction on how we collect this information,” Mr Daking said.

Stay up-to-date on the coronavirus outbreak

He said his business was trying to gather the names and numbers of every person who entered the pub.

“We made it up when we first reopened,” he said.

“[There was] no direction, no proforma, no advice. How do we verify the information that people are giving us? How do we store it?

“What form would you like us to have it in? Do we need to email it to you if Public Health wants it — do we hand it over? Do we post it?”

He said there were a couple of “big elephants in the room”.

“Privacy — we’re collecting people’s information,” he said.

“We’re leaving hundreds of people’s names and numbers at the front door of thousands of venues across Tasmania.”

Guidance coming for business

On Tuesday, the director of Public Health, Mark Veitch, said there were various ways businesses could collect information, “whether through pieces of paper or some apps that I understand can also be used for it”.

He said it was not sophisticated information that was required, it was “pretty basic”.

“In the next several days, we will provide some guidance on the sort of information that we want, and we’re not at this stage going down the path of prescribing the sheet of paper,” Dr Veitch said.

“But it’s pretty straightforward: It’s what the person’s name is, telephone contact number — the right one please — an email and when they were at the premises.”

He said Public Health was looking at how the process could be mandated.

Attorney-General Elise Archer said there was enough support around contact tracing for venues, and WorkSafe Tasmania was helping businesses with COVID-safe plans.

“We’re not in the business of trying to make things mandatory unless that’s on the director of Public Health’s advice,” she said.

Ms Archer said businesses must only use information for the purpose for which it was collected.

“So I would encourage all businesses to maintain that level of privacy for their customers and patrons, and ensure they only use that information for that purpose,” she said.

Business suggests app or QR code for collect information

Vee Hanson manages the Signal Station eatery at Mount Nelson, which her partner Robbie McLean owns.

When patrons arrive, Ms Hanson takes their name and contact number, and also asks a series of questions about whether they have travelled interstate or overseas recently, and whether they have symptoms or been asked to isolate.

“The standards that we’ve put in place are really high and we want to keep it that way,” Ms Hanson said.

By Ellen Coulter  ABC News

See more of Meg’s recent media