Record keeping and contact tracing

Help protect Aotearoa by encouraging staff and visitors to scan in every time they visit your business.

Record keeping can slow the spread of COVID-19

Record keeping involves collecting the details of all workers, customers, and visitors who visit your workplace or location. If there is a case of COVID-19 in the community, public health officials and contact tracers will use this information to identify people who may have been exposed to COVID-19.

When businesses and event organisers keep records of who was at their workplace or location, it makes contact tracing faster and more efficient.

Good record keeping and fast contact tracing will help stop the spread of COVID-19, and protect our businesses, communities and each other. 

Businesses and locations must have ways for people to record their visit

Many businesses and locations are now required to make sure people can easily keep a record of when they visit. This is a requirement at Red, Orange and Green.

If you are the person in charge of a business, location or event, you legally must:

  • make sure you have safe and secure systems and processes in place so that everyone working on or visiting your premises can scan in or provide their details for contact tracing
  • keep contact tracing records for workers, contractors, customers, and volunteers, no matter how long they are there for
  • keep a record of everyone aged 12 years or over who visits or works at your premises.

You legally must have more than one way for people to record their visit, especially for people who are not able to scan QR codes.

Your system for recording customers and visitors can include: 

  • asking people to scan in using the NZ COVID Tracer app
  • recording your customers' and visitors' details manually
  • providing paper forms for customers and visitors to fill in with their details and place in a collection box 
  • using your existing record-keeping systems, such as swipe-card access or appointment bookings.

You still need to continue displaying your QR code poster even if you are not required to collect customer records.

More information and advice on record keeping | (external link)

Who needs to have a way of recording a visit

Certain businesses and event organisers legally must have a way for customers and visitors to record that they have entered their premises or attended a gathering or event.

You must have ways to record a visit if you are:

  • a cafe, restaurant, bar or nightclub
  • a health service
  • a close-contact personal care service — for example, a hairdresser or beautician
  • an indoor exercise facility — for example a gym or swimming pool
  • an entertainment venue — for example a cinema, stadium, theatre or casino
  • an indoor public facility where people gather — museums or libraries
  • a court or tribunal
  • a social services provider with customer service counters — such as a Ministry of Social Development office
  • organising a wedding, funeral, tangihanga or faith-based service
  • organising a concert
  • having a gathering or hui at a marae.

Record keeping at events

At an event, for example a wedding or tangihanga, either the venue owner or operator, or the organiser/hirer of the venue can be the person who is responsible for making sure there are ways for people to record their visit.

If your business is not on this list

We still encourage you to keep contact tracing records and promote the use of the NZ COVID Tracer app.

Information about the NZ COVID Tracer app

Protect the contact records you collect

Contact records are personal information. They need to be collected, used, stored, disclosed, and disposed of safely and securely in accordance with the Privacy Act 2020. 

The most secure way for customers and visitors to record their details is by scanning the NZ COVID Tracer app.

If people cannot use the NZ COVID Tracer app, you need to make sure that any alternative method you use for contact tracing protects people’s privacy, and that you only use the information they provide for contact tracing purposes.

Alternative recording systems require more care to keep them safe and secure.

Do not leave paper-based records out in the open where others can see the information. This is the leading cause of COVID-19-related privacy breaches.

The Office of the Privacy Commissioner's website has practical guidance that will help you protect people's privacy when using alternative contact recording methods. 

Use a simple privacy statement alongside your alternative record keeping system to let people know why the information is needed and how long you need it for. 

Guidance on mandatory record keeping for contact tracing | (external link)

Make it easy for yourself and others

There are several ways you can make record keeping easier for you and your workers, customers and visitors. 

If someone refuses to or is unable to scan in

If someone refuses to or is unable to scan in, you are not expected to force someone to provide their details, or to refuse them entry.

Remember, some people may have their own way of keeping track of where they have been.

It is up to you to decide what is appropriate for your premises and the wellbeing of your staff and other customers.

Resources for your business

Download and print record keeping slips, stickers and a box template. You can also print posters to remind staff, customers and visitors to scan in.



If you do not keep records

If you do not follow these record keeping requirements, you will be fined an infringement fee of $300 or a court-imposed fine of up to $1,000.

Failing to display a QR code will continue to be an infringement offence carrying an infringement fee of $300 or court imposed fine of up to $1,000.

Last updated: at