Mandatory Record Keeping is Here

Commercial Law
Employment Law
Sep 07 2021

An earlier version of this article was published on 23 August 2021. This revised version was published on 7 September 2021 to reflect the mandatory record keeping rules now being in force, and to include information published by the government after 23 August 2021.

New Zealand is famous world wide for its Covid stopping Lockdowns. But our ability to sustain regional and localised lockdowns, and to avoid the full economic impact of shutting down our economy, is only because of our ability to contact trace quickly and effectively. As the huge number of contact events and places of interest in the current outbreak has shown, this ability is of critical importance in the new Delta environment.

This is why, on 23 August 2021, the Government announced its a decision (which had been in discussion for a number of months) to formally require most businesses to keep contact tracing records at all alert levels. These requirements came into force at 11.59 pm on 7 September 2021.

At the time of the 23 August announcement, it had been suggested a similarly wide-reaching requirement on individuals to sign in would be imposed. Because of difficulties around enforcement, it has since been clarified that scanning or signing in will not be mandatory.

Background
Contact tracing has obvious privacy concerns – it requires people to provide personal information and creates an accessible record of the places they have been. Making it mandatory has continued to be controversial throughout the pandemic. Probably as a result of this controversy, the Government has long held off on making it a mandatory requirement unless there is an active outbreak.

Until the new rules came into effect, at alert level 1 businesses and event managers had only been required to display a QR code at or near their main entrance. Only at alert level 2 or above had businesses – and then only a small number of businesses – been required to keep a fuller record of who had visited and to monitor compliance with that requirement.

Outside of businesses, there have also been record keeping requirements for social gatherings – in particular, gatherings at marae, weddings, funerals, tangihanga and religious services. Again, until the new rules came into effect this had only applied at alert level 2 and above.

The New Requirements for Businesses and Event Managers
From 11.59 pm on 7 September 2021 a “contact record rule” applies to certain businesses and services. Ensuring a range of contact tracing options are available is part of the new normal.

Which businesses are affected depends on which alert level a business is operating under. At alert level 4, the rules apply to primary industries, supermarkets, petrol stations, courts and tribunals and the justice sector, and providers of:

  • health services (including pharmacies and funerary services);
  • food delivery services for bakeries, uncooked food suppliers, and alcohol suppliers;
  • cooked food delivery services contracted by health service providers (like Meals on Wheels);
  • purveyors of essential non-food consumer products;
  • building, construction, and maintenance services;
  • postal, courier, freight, logistics, and transport services;
  • scientific services;
  • school and community-based services;
  • key utilities and communications;
  • government and security services; and
  • pest management services.

At lower alert levels, the above services remain affected by the new rules. Also affected at lower alert levels are businesses not able to operate at level 4, including cafes, restaurants, barbers, rest homes, libraries, museums, swimming pools, massage parlous, beauticians, barbers, hairdressers, exercise facilities, cinemas, theatres, casinos, and concert halls and nightlife venues.

Visitors to aged care and healthcare facilities will also need to be provided with scanning in options, as will those attending social gatherings including those at private houses, marae, weddings, funerals, tangihanga and faith-based services.

The person in charge of providing an affected business or service at a particular workplace to have “systems and processes” in place to allow every person aged 12 or over who enters their workplace to either scan their QR code or record their visit in another way.

This could involve either having them create their own contact record by signing a register at the door or dropping a slip into a box, or having a staff member take down details. The key requirement is that people who are not able to scan QR codes have a convenient way to record their visit, however long they are at the premises.

The requirement is in addition to the existing rule that means workplaces have to display a QR code at or near their main entrance.

For businesses with multiple premises, or event managers that run events at different locations, their manager on the day at each of their sites is responsible for ensuring the requirement is complied with. The coming into force of these additional rules is a good reminder to ensure that members of your management team are familiar with their obligations under the Covid orders.

The government has also made clear that it expects scanning and signing in facilities to be made available to all workers, contractors, customers, and volunteers. Workplaces with multiple entries and exits should ensure QR codes and registers are made available at all of these doors, including employee entrances.

Penalties
Compliance with the new rule is mandatory. An intentional breach of the requirements carries the risk of a conviction resulting in a criminal record and up to six months’ imprisonment or a fine of up to $4000.

While during previous lockdowns the Police have been cautious in using their formal powers, preferring to warn people, during the current outbreak we have seen the Police making greater use of their formal enforcement powers. With the greater threat to the community and economy that Delta represents, and the importance of being able to quickly trace contacts to combatting the spread of the virus, we expect to see the Police quicker to prosecute non-compliance of the rules than earlier in the pandemic.

The Courts are also taking offences against the Covid orders seriously. During the March 2020 lockdown, many people who breached received short sentences in prison: deliberate flouting of the law carries a very real risk of similar treatment. For many people the risk of a criminal conviction will also be a significant deterrent. Businesses that face conviction will of course only risk a fine in most cases, but will also need to weigh up the considerable reputational risk conviction brings.

Privacy
While businesses will now be required to comply with these obligations, it is important that they also take into account their obligations under the Privacy Act 2020 when recording information. Key obligations include:

  • Only gathering information that is necessary;
  • Only using information for the purpose for which it was gathered; and
  • Destroying information when it is no longer needed.

Contact tracing information should be kept separate and, in accordance with the Covid Orders, destroyed after 60 days. It should not be used for other purposes (like client data bases) without specific permission. As the information is highly personal, it must also be stored carefully to avoid anyone accessing it.

The risks of getting things wrong in terms of privacy are serious with compensation for breaches awarded under the Privacy Act 2020 often exceeding $10,000.

A number of businesses, citing privacy concerns, have moved away from having a register book open on the counter towards having complete-and-tear forms that are posted in boxes. We consider this can better help businesses comply with their Privacy Act obligations to protect personal information against wrongful access. It will however be important that the information posted in the boxes is regularly collated so that it is accessible to contact tracers.

Non-Compliant Customers

When the mandatory record keeping rules were first announced, the Government suggested that customers and visitors to venues would also be put under an obligation to make use of scanning in facilities. This caused anxiety for some business and event operators, it not being clear if they would be expected to enforce scanning in, or turn away non-compliant customers.

The government has now clarified that scanning or signing in will not be mandatory. A spokesperson for the Department of Prime Minister and Cabinet has said that “there is no expectation or requirement that businesses or locations should force a customer or visitor to scan in or provide” contact tracing details. Nor are they “required to expected to turn people away who may refuse to make a record of their visit”.

This is a welcome clarification for businesses already likely to be under pressure with recent closures, for whom being made to turn away non-compliant customers would cause further loss. With the media reporting widespread resistance to mandatory contact tracing requirements in some sectors of the community, it is also likely to spare businesses from becoming a flashpoint for anti-Covid restriction agitation.

Where We Can Help
Holland Beckett Law has been advising our clients on what the ever-changing array of public health measures means for them day-to-day. The changes in messaging around mandatory scanning in requirements illustrates how quickly the situation can develop.

With the frequent changes to the rules, it is important to have people on your side who understand the requirements and can help you ensure your business complies with all of the requirements.

We are more than happy to discuss your situation and help you better understand your rights, obligations, and options.

You may also like ...
Restructuring in the workplace – What employers need to know
With the economy continuing on its downward slide, you will not be alone in giving thought to potential cost cutting measures, including reducing your labour costs. Restructuring is usually a last resort for employers and is only a step that tends to be taken when there seem to be no other viable options for reducing costs quickly.  While the impact on employees is immense, it is clear that a restructure process can be just as stressful and fraught for an employer.  That is why, sometimes, employers can get things wrong and may find themselves at the centre of a personal grievance, which can result in greater stress, cost and uncertainty. A restructuring needs to be substantively justified, and procedurally correct.  If you do not meet both of these requirements, there is a risk that if an employee were to make a claim against you, it could be upheld. What is Substantive Justification? It is likely that during recessionary times, such as we are in now, the substantive reasons for a restructure will be fairly obvious to your employees.  However, you will still need to justify this by providing evidence in support.  This may include pointing to reduced sales figures or forecasts, showing increased costs (i.e. materials, rent, insurance), or any other information that you are willing to share that goes toward justifying the proposal to restructure. What is the Correct Procedure? The procedure for restructuring is usually where an employer can get tripped up.  To start, you need to remember that you should not pre-determine that a restructure is inevitable.  You have a good faith obligation to your employees to consult with them before any decisions that may affect their employment are made.  It may be that during consultation, you are able to see a way forward that means a restructure is not required, or at least not to the extent that you had originally envisaged. Once you have substantive justification, you need to advise your employees that you are proposing a restructure and give them adequate information including what the restructure would entail, how it would impact them, and how you wish to consult with them about it. You will then move to the consultation stage and be ready to provide further information or answer any questions the employees may have.  Once you have finished consultation, you will need to advise the employees of your proposed decision.  Your employees should then be given an opportunity to comment on or ask further questions about the proposed decision.  It is not until they have been given this opportunity that you should procced to confirm your decision. The exact process you follow will depend on factors such as the size of your workforce, the number of roles that may be impacted, the typical method of communication with employees, the specific terms of your employment agreements, and the location of your employees. Having guided employers through numerous restructures, the one point we want you to keep in mind is that getting your restructure right is by far more preferable than having to deal with the consequences (and potential costs) of getting it wrong.  We can provide specific advice and guidance on restructuring and all other employment related issues, so please contact our employment law team at any time for further information.
Read more
Holidays Act – could change finally be on the horizon?
Earlier this week the Workplace Relations and Safety Minister Brooke Van Velden gave a speech to the Auckland Business Chamber, reiterating her priorities following the conclusion of the Government’s 100-day plan in which Fair Pay Agreements were abolished, and the availability of 90 day trial periods extended to all new employees. The Minister has confirmed that delivering changes to the Holidays Act (“Act”) is one of her top priorities, which is likely to be welcome news to both employers and employees. Compliance with the Act has been difficult and costly for employers and payroll providers. The Labour Government put together a taskforce in 2018 to address the many issues being experienced by employers when calculating leave and holiday entitlements. The taskforce made a number of recommendations, all of which were accepted (for further details on these changes see our previous article here). A draft Leave Entitlements Bill was prepared, however was not introduced prior to last year’s election. The overarching issue with the Act is that there are multiple ways to calculate an employee’s holiday pay, and the Act has struggled to keep up with working arrangements outside of a normal five day a week salaried employee. Payments such as bonuses, commission, or if an employee works variable hours mean that the calculations are not straight forward and are often done incorrectly. The changes proposed were an attempt to simplify these calculations. The Minister has now confirmed that the changes recommended by the taskforce and the draft Bill will not be “simply rubberstamped” and will be subject to scrutiny as well as consultation with key stakeholders. She went on to say “if the policy is difficult to draft, chances are businesses would have a tough time implementing it too”. This indicates a major reset of the Act, and the changes which we had expected, could be on the way. Other indicated changes to employment law include a change to the rules surrounding contractors (with the Court of Appeal due to hear the Uber case this month (see here for our previous advice regarding this), we are likely to also have further developments in this area from the Courts later in the year) and changes to personal grievances. The Minister has asked for advice on whether an income threshold for raising a personal grievance can be set and removing eligibility for any remedies when an employee is at fault. The Minister has been very clear that she would like to receive feedback from the stakeholders who will eventually have to work with the Act and it is important that businesses use this opportunity to have a say on the Act. The majority of employers have struggled to achieve strict compliance with the Act due to its many complexities. Putting forward issues which regularly impact your business will ensure these can be given consideration. Our team will be closely monitoring this and will provide specific information on how feedback can be given when this information is available. If you require assistance with your current obligations under the Act, or would like to discuss providing feedback then please feel free to get in touch with a member of our specialist employment law team.
Read more
Using Chat GPT in the workplace – what you need to know
The use of Artificial Intelligence (“AI”) in the workplace is likely to become increasingly common as technologies advance and benefits become proven and trusted. One AI development that looks set to be eagerly embraced by business is the generative pre-trained transformer model designed by developer OpenAI and used in its Chat GPT product (as well as in competing products, such as Google’s Bard and Microsoft’s Bing Chat). In a nutshell, Chat GPT is a large language model chatbot that is able to generate content based on requirements set by the user.  It essentially searches the internet to find information that matches your query and can then produce written content including articles, emails and even social media posts, as well as images and graphics. While the use of this technology may create huge benefits for your workplace, there are a few key points that you should be aware of before you start: If you plan to use Chat GPT in the workplace, you should open a Chat GPT Enterprise account (or its equivalent). The Enterprise account will provide greater speed, data security and privacy than a standard individual account.  Yes, it will cost more, but if your employees use Chat GPT from their own account there is a risk that sensitive/confidential information may be leaked and could become available to anyone.  If you use the Enterprise level service, any information you input or work product received will remain private to you and will not be used by the model to provide work output for third parties. Furthermore, if an employee uses their own Chat GPT account to generate work product, it is the employee who will be the copyright owner of the work product – not the employer. This may create the issue of having to assign or license the right to use the content, or the employee having the ability to share the work product with third parties without requiring your consent to do so.  It may be simpler to have copyright clearly belonging to you from the start. Another important point is that the content that you receive may not always be correct or suitable! Chat GPT looks for any available information to help it formulate its work product.  That means it will not always retrieve accurate information, and in some cases could be basing its work product on false information.  Furthermore, the style of the response may not be suited to you or your customers.  Chat GPT is not yet able to distinguish between what might be a great communication to an American consumer from one that would work better in a New Zealand context. If you are thinking about using AI in the workplace, it really is a good idea to put policies in place so that you and your employees understand the parameters and effects.  It is an ever-evolving world of technology so you will need to ensure that policies (and employment agreements) are regularly reviewed and updated to meet your needs. If you require any assistance with your policy drafting and implementation, our employment law team is here to help (and will provide you with a much better-tailored service than Chat GPT!)
Read more

Start typing and press enter to search

Scroll to Top