Legal experts are warning of a “privacy crisis” after it was revealed the companies collecting track and trace data for pubs and restaurants are selling on data to marketers, credit companies and insurance brokers.
According to a Times investigation there has been a rise in companies exploiting QR barcodes to take names, addresses, telephone numbers and email details before passing them on to companies.
Small print
The concerns do not relate to the official NHS Covid contact-tracing app, but many firms use private sector solutions to meet the new requirements.
Government guidelines dictate that data collected by businesses should be held for 21 days before being disposed, and must not be used “for any purposes other than for NHS Test and Trace”.
But by hiding terms in the small print, some firms may have found a work-around that allows them to keep data for several years and even farm it out.
“Suddenly getting loads of texts”
Gaurav Malhotra, director of Level 5, a software development company that supplies the government, said data could end up in the hands of scammers. “If you’re suddenly getting loads of texts, your data has probably been sold on from track-and-trace systems,” he said.
One of the firms claiming to offer a privacy-compliant QR code service is Pub Track and Trace (PUBTT), an organisation based in Huddersfield charging pubs £20 a month to keep track of visitors, who are asked to provide their name, phone number and email address.
Despite its claim to be a “simple” service, its privacy policy, which users must accept, explains how personal data of people accessing its website can be used to “make suggestions and recommendations to you about goods or services that may be of interest to you” and shared with third parties including “service providers or regulatory bodies providing fraud prevention services or credit/background checks.”
Another company, Ordamo, states that data from website visitors is “retained for 25 years” rather than the 21 days outlined by the government.
The Information Commissioner’s Office is assessing 15 companies that provide such services, it has been reported.
Related: Jeremy Corbyn: ‘We didn’t go far enough, we didn’t go fast enough’
Since you are here
Since you are here, we wanted to ask for your help.
Journalism in Britain is under threat. The government is becoming increasingly authoritarian and our media is run by a handful of billionaires, most of whom reside overseas and all of them have strong political allegiances and financial motivations.
Our mission is to hold the powerful to account. It is vital that free media is allowed to exist to expose hypocrisy, corruption, wrongdoing and abuse of power. But we can't do it without you.
If you can afford to contribute a small donation to the site it will help us to continue our work in the best interests of the public. We only ask you to donate what you can afford, with an option to cancel your subscription at any point.
To donate or subscribe to The London Economic, click here.
The TLE shop is also now open, with all profits going to supporting our work.
The shop can be found here.
You can also SUBSCRIBE TO OUR NEWSLETTER .
