Source: Privacy Commissioner
The Government has introduced mandatory record keeping at specified places and gatherings (referred to in this guidance as organisations). Please visit theUnite Against COVID-19website for more information about the new requirements and to see if your organisation is required to comply with the order.
In addition to the requirements imposed by the order, organisations need to ensure that their systems and processes for record keeping comply with the Privacy Act 2020. This includes ensuring that the information is held securely and cannot be seen or accessed by people who do not need to see it, including other customers or visitors. The paper customer sign-in registers that have previously been used by some organisations are not compliant (as the contact record information is visible to other customers) and need to be replaced with other processes and systems.
Unite Against COVID-19 resources are availablehere.