What is compliance?
Data Security, Privacy & Patron Anonymity
Currently, compliance within the realm of digital record keeping refers to the collection and storage of contact information consistent with Australian Privacy Principles (APP). SafeEntry collects information in accordance with Australian government and state government directives and stores this information for a time-limited period, in encrypted form, on secure servers in Australia. No personal information between people or between people and venues is exchanged or disclosed. Only anonymised IDs are exchanged and subsequently released to the government once a data release request is submitted.
Most venues are currently required to collect information such as name and contact details of their patrons. This information needs to be digitised within 24 hours of collection and provided to the government immediately upon request.
Venues with a SafeEntry account can submit a data release request via the website or web application for each venue. Please identify the date range for which you would like SafeEntry to release patron information to the government. The information is transmitted to Public Health Authorities in encrypted form and a key is provided to decrypt this information for the sole purpose of contact tracing.
State Directives for Record Keeping
All States and Territories have issued a Direction or Order for businesses, premises and facilities that have obligations under the Privacy Act 1988 to collect personal information for COVID-19 contact tracing purposes.
ACT businesses to collect a name and contact number.
New South Wales
Some New South Wales business sectors must collect a name and a phone number or email.
Venues must ensure patron details are correct, stored electronically, and submitted to Service NSW within 24 hours.
All NSW venues are now encouraged to sign in patrons with a QR code. If any business breaches a public health order, authorities can hand them a fine of up to $55,000 and a further $27,000 for each day an offence continues and on the spot fines.
Some Queensland business sectors must collect the name, phone number, email address, date and time of patronage for all entering their premises, and keep for 56 days.
Some sectors in Victoria – where there’s been a massive surge in coronavirus cases – must collect the first name and phone number of those visiting longer than 15 minutes and keep for 28 days.
All Victorian venues are now encouraged to sign in patrons with a QR code.
Some South Australian business sectors must collect a name and a phone number or email.
Workplaces required to keep records that would assist with notifying people who enter/leave the workplace of any potential exposure to COVID-19. Records must be kept for at least 21 days.
Venue capacity count: Large hospitality venues that can hold more than 500 patrons need to include staff in their patron count. For WA’s major sport and entertainment venues, a 50 per cent capacity rule applies.