<!--The Official Report of Parliamentary Debates (Hansard) of the Legislative Council and the House of Assembly of the Parliament of South Australia are covered by parliamentary privilege. Republication by others is not afforded the same protection and may result in exposure to legal liability if the material is defamatory. You may copy and make use of excerpts of proceedings where (1) you attribute the Parliament as the source, (2) you assume the risk of liability if the manner of your use is defamatory, (3) you do not use the material for the purpose of advertising, satire or ridicule, or to misrepresent members of Parliament, and (4) your use of the extracts is fair, accurate and not misleading. Copyright in the Official Report of Parliamentary Debates is held by the Attorney-General of South Australia.-->
<hansard id="" tocId="" xml:lang="EN-AU" schemaVersion="1.0" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:xsi="http://www.w3.org/2007/XMLSchema-instance" xmlns:mml="http://www.w3.org/1998/Math/MathML" xsi:noNamespaceSchemaLocation="hansard_1_0.xsd">
  <name>Legislative Council</name>
  <date date="2021-02-16" />
  <sessionName>Fifty-Fourth Parliament, Second Session (54-2)</sessionName>
  <parliamentNum>54</parliamentNum>
  <sessionNum>2</sessionNum>
  <parliamentName>Parliament of South Australia</parliamentName>
  <house>Legislative Council</house>
  <venue></venue>
  <reviewStage>published</reviewStage>
  <startPage num="2618" />
  <endPage num="2659" />
  <dateModified time="2022-08-06T14:30:00+00:00" />
  <proceeding>
    <name>Question Time</name>
    <text id="20210216f11ad908494c4f1580000069">
      <heading>Question Time</heading>
    </text>
    <subject>
      <name>COVID-19 QR Code Security</name>
      <text id="20210216f11ad908494c4f1580000070">
        <heading>COVID-19 QR Code Security</heading>
      </text>
      <talker role="member" id="4697" kind="question">
        <name>The Hon. K.J. MAHER</name>
        <house>Legislative Council</house>
        <portfolios>
          <portfolio id="">
            <name>Leader of the Opposition</name>
          </portfolio>
        </portfolios>
        <questions>
          <question date="2021-02-16">
            <name>COVID-19 QR Code Security</name>
          </question>
        </questions>
        <startTime time="2021-02-16T14:24:04" />
        <page num="2621" />
        <text id="20210216f11ad908494c4f1580000071">
          <timeStamp time="2021-02-16T14:24:04" />
          <by role="member" id="4697">The Hon. K.J. MAHER (Leader of the Opposition) (14:24):</by>  My question is to the Minister for Health and Wellbeing regarding COVID-19. In view of the State Coordinator's announcement of penalties for misuse of QR code and check-in data earlier today, can the minister inform the chamber what penalties apply for misusing data that was gathered before today's announcement? Secondly, can the minister describe what security measures are in place for the protection of QR code data and paper check-in data?</text>
      </talker>
      <talker role="member" id="3164" kind="answer">
        <name>The Hon. S.G. WADE</name>
        <house>Legislative Council</house>
        <portfolios>
          <portfolio id="">
            <name>Minister for Health and Wellbeing</name>
          </portfolio>
        </portfolios>
        <questions>
          <question date="2021-02-16">
            <name>COVID-19 QR Code Security</name>
          </question>
        </questions>
        <startTime time="2021-02-16T14:24:38" />
        <text id="20210216f11ad908494c4f1580000072">
          <timeStamp time="2021-02-16T14:24:38" />
          <by role="member" id="3164">The Hon. S.G. WADE (Minister for Health and Wellbeing) (14:24):</by>  I am yet to see a copy of the direction, because my expectation, as is the State Coordinator's practice, is that it would be issued at one minute past midnight. But even if it has been issued, I haven't seen it yet.</text>
        <text id="20210216f11ad908494c4f1580000073">My understanding is that the State Coordinator's particular concern is in relation to physical contact sheets. The government has consistently allowed people to use contact sheets so that people who don't have smart phone technology can still record their presence. The concern that the State Coordinator is responding to is the prospect of that being misused.</text>
        <text id="20210216f11ad908494c4f1580000074">My understanding is that if a person does breach the direction as updated, if they are a natural person they will be liable to an expiation fine of $1,000, if they are a body corporate they will be liable to a fine of $5,000. If the circumstances are of an aggravated nature, my recollection is that the penalty for a natural person is $25,000 and the penalty for a body corporate is $75,000. If I have those details incorrect I will certainly provide an answer to the question on notice.</text>
        <text id="20210216f11ad908494c4f1580000075">It is clearly a risk of data being misused. I think I should stress that this is not only directed at business operators. I think there is a legitimate concern from members of the public that if they put their details on a contact sheet, and that contact sheet is left in a public place—and by that I also mean within a restaurant or the like—that others, not the business operator but others, using that premises might get access to that data.</text>
        <text id="20210216f11ad908494c4f1580000076">So I think it's the sort of concern that the Hon. Mark Parnell is picking up in legislation before this place, which would be quite disorderly of me to refer to without the <term>Notice Paper</term> bringing it on. I'm not saying the Hon. Mark Parnell's bill is the best response to that issue, all I'm saying is that it shares a concern that people's privacy be respected.</text>
        <text id="20210216f11ad908494c4f1580000077">To be frank, that is really important from a public health point of view. If we have people not putting their contact details down when they don't have access to QR code technology, that increases the risk that if we need to chase that person we won't be able to.</text>
      </talker>
    </subject>
  </proceeding>
</hansard>