The issues surrounding Covid19 keep on evolving where legal rights and obligations must be considered.
One of the Covid19 restrictions that will probably be with us for a while, considering the second waves now affecting New South Wales and Victoria is contract tracing and the issues around confidentiality.
Restrictions on Business Activities and Undertaking Direction (No 5), effective on the 24th July provides:-
“A person who owns, controls, or operates a restricted business, activity, or undertaking must keep contact information about all guests and staff for contract tracing purposes for a period of 56 days unless otherwise specified. This information must include: name, phone number, email address, and the date, and time period of patronage. If requested, this information must be provided to public health officers. The information should be securely stored, not used for any other purpose, and deleted after 56 days.
To understand whether you are a restricted business, and your obligations around confidentiality and privacy that arises as a result of this directive, you should seek independent legal advice.