NZ COVID Tracer QR code privacy statement

By continuing with this process you are choosing to apply for a QR Code, on behalf of a business, organisation or group (Location) that you have authority to represent. This QR Code is to be used in conjunction with the NZ COVID Tracer App. 

  • Each QR Code will contain a Global Location Number (GLN), which uniquely identifies a single Location. 
  • A QR Code Poster will be generated for each Location identified in your application to enable it to be displayed at that Location (or each of multiple Locations).


The information you provide will be used only for purposes related to contact tracing or the management of QR Codes during the COVID-19 pandemic response. The information will not be shared with other government agencies except where the agency is directly involved in the COVID-19 public health response.

Your contact details

It is important that the QR Codes are only applied for by people who have the authority of each Location to make that application, and that the QR Codes are sent to appropriate people.

The personal information and verification details you provide to support the application will be available to the New Zealand Ministry of Health (the Ministry), and to the Ministry of Business, Innovation & Employment (MBIE) if they request them. 

These records are needed to make sure only the right people request a QR Code for a business or organisation, and to maintain the integrity of the records. The MBIE service ensures this by requiring the use of a RealMe account. We instead require you to verify your identity with your Driver Licence. 

We will retain your first name, surname, email contact, and the outcome of the verification process described below (valid or invalid) and a record of any GLN created as a result of your application. These details will be used to keep a record of who made the application, and who the QR Code was sent to. This information will be used to follow up if there is any subsequent issue with the allocation of a QR Code. 

The verification process validates your identity using your Driver Licence. 

  • This is a cloud-based service (Verifi Identity Services). 
  • This verification information will be held securely by the verification service and then deleted after seven days. 
  • Your Driver Licence number and Date of Birth must be submitted in the verification process but these details are not retained.

A record of your contact details and the confirmation or rejection of an identity match will be retained for the duration of the pandemic response and then securely deleted.

QR Code Location details 

The QR Code Posters, if displayed at the related Location, may be scanned by Consumers with a NZ COVID Tracer App or another approved app that is compatible with Ministry standards.

The resulting scanned information will be used to assist in contact tracing to identify where individuals may have come into contact with COVID-19.

QR Code Locations can be identified by Contact Tracers, as they will have secure and logged access to these records. They will be able to use the Location Contact Details you provide to make contact if they need to. Please make sure you let the contact person you provide for each Location aware that you are providing their contact details for this purpose.

MBIE will retain this information in accordance with its Business Connect retention policies.


If Contact Tracers consider an event has occurred where, in their clinical view, there was reasonable potential for a person to have been exposed to COVID-19, they may send an electronic notification to Consumers who have an App designed for that purpose. 

This notification will be based on the QR Code of the Location at which the event occurred, and a date and time.

The notification will not disclose the identity of the Location to the Consumer.

Data security 

We will store your information securely. In order to deliver this service we use Amazon Web Services located in Sydney, Australia.


It is voluntary to use this NZ COVID Tracer App QR Code Poster generation process. You may also send a completed template to the [email protected] mailbox or use the MBIE Business Connect process if you prefer. 

If you wish to proceed with this application the identity information fields and verification processes are compulsory. If you do not wish to provide this information, please do not proceed with this application.


If any changes are made to this Privacy Statement we will provide email notification to you prior to implementing such changes.

Further information

If you have any questions, or wish to view or seek correction of any information held about you please contact us at [email protected].

Who can I contact if I have a privacy concern?

If you're not satisfied with our response to any privacy-related concern you may have, you can contact the Privacy Commissioner:

Office of the Privacy Commissioner
PO Box 10-094
New Zealand

Phone: 04 474 7590
Email: [email protected]

Back to top