New Zealand is now at Alert Level 1 and contact tracing is no longer required. However, if you want to continue to collect this information (eg by keeping a log of visitors to your business) you may wish to use the register templates available below.
NZ COVID Tracer app
While we are at Alert Level 1, the Government is encouraging people to keep records of their movements to enable contact tracing in the event of a further outbreak of COVID-19. The Government has produced an app that people can voluntarily use to record their own movements. More information about the app is available here. You can also generate QR Codes for your workplaces or retail spaces that allow individuals to scan their movements into the app for storage on their personal phones.
Guidance for Alert Level 2
At this Alert Level, many businesses (including restaurants, cafes and cellar doors) are required have a Contract Tracing Register. This is in addition to the required Contact Tracing Registers for your workers that you would have used at other Alert Levels. More information about when the register is necessary is available in our guidance for Alert Level 2 operations.
If anyone who has been at your premises or workplace is a suspected or confirmed case of COVID-19, you must be able to trace that person’s contacts. The key to being able to do this is your Contact Tracing Register.
Below, we have prepared some example templates of Contact Tracing Registers that you may wish to use. You can adapt these to suit your own business needs.
Since 29 May 2020, a residential address is no longer a required part of your contact tracing register, so we have updated our templates to reflect this.
You should also consider the following:
- Accuracy: How you’ll ensure the register is being used and maintained correctly.
- Minimising shared surfaces: How you’ll prevent customers or staff from touching common surfaces, or using common equipment (eg pens and paper), in order to enter details. Where possible, you could have specified staff taking details verbally from people and writing them down. This will also address the privacy security concern noted below.
- Location: Where the register will be located and who is best placed to enter the information.
- Zoning: Whether you divide your workspace/premises into zones and limit movement between the zones.
More information is available on WorkSafe’s website here.
As you will be collecting personal information about individuals, you need to ensure you comply with the Privacy Act. This includes the following:
- Collection and consent: You need to let people know that you are collecting the information and what you are going to do with it. We have prepared a poster you can use at your entrance, letting people know that you will be running a Contact Tracing Register. As part of the information gathering process, you should let people know that the information may be provided to Government if requested for contact tracing purposes (the poster includes this notice).
- Security: You need to keep the register secure. If you are using pieces of paper, these need to be stored securely and not accessible by anyone who does not need access. This also means not passing the register around to complete, so everyone can see each other’s details.
- Access: If a person requests access to the information held about them, you need to respond to that request. More information on dealing with access requests is available here.
- Deletion: You should delete the information when it is no longer required. At the time of writing, WorkSafe recommends this information be retained for at least two months.
- Use and disclosure: Generally, you can only use the information for the purpose for which you got it. This means only providing it to the Government if requested for the purposes of contact tracing a confirmed or suspected case of COVID-19.
More information about the requirements of the Privacy Act is available on the Privacy Commissioner’s website here.
This is not a chance to freely add people to your mailing list. If you are collecting contact tracing information, you can generally only use it for contact tracing purposes. If you would like to sign people up to your mailing list, then you must ask them separately.