Handwritten visitor registers pose risk of personal data breach

Handwritten visitor registers are placed on a table near the entrance at a supermarket in Yeongdeungpo-gu, Seoul, Tuesday. Korea Times photo by Lee Hyo-jin

By Lee Hyo-jin

Handwritten visitor registers in restaurants, coffee shops and other business establishments, a mandatory scheme implemented by the government to track coronavirus cases and prevent further spread, are raising concerns about possible breaches of personal information.

Under toughened social distancing measures imposed in the greater Seoul area at the end of August, businesses in the hospitality industry such as eateries, cafes and theaters are obligated to collect customer information for potential contact tracing later on.

All visitors must provide their personal details ― including name, time of visit and phone number ― through either a quick response (QR) code-based system or a handwritten form. Although the paper-based visitor log is a supplementary method for store owners who have trouble using the QR code system in their stores, it is widely used in many places.

However, customers are uncomfortable leaving contact details on paper in public, out of concern that their personal information might fall into the wrong hands and be used in crimes such as telecommunication fraud.

"I've been to several cafes and restaurants and all of them had the visitor register open on the counter, visible to everybody in the store. What if someone takes photos and distributes them online?" a concerned office worker in Seoul said, adding that although she would like to stick to the QR code system, some stores only offer handwritten registers.

People also question the effectiveness of the paper form, asking whether "hastily scribbled visitor logs" will actually be useful in case of infection. The health authorities had already struggled with thousands of inaccurate entry logs at nightclubs in Itaewon in May.

Some are skeptical about sharing a pen and paper with others as it leads to unnecessary contact and may facilitate infection.

Following concerns, the Ministry of Health and Welfare has released guidelines for store owners on collecting and handling customer contact details through handwritten forms.

The register must be securely stored out of sight or reach of other customers. It can only be kept for four weeks, after which it must be discarded by shredding or incinerating. Also, a worker should confirm the personal data by comparing it with the visitor's identification card.

Local governments have been informing store owners that using personal information for purposes other than epidemiological investigation is punishable by up to five years in prison or a 50 million won ($42,000) fine under the Personal Information Protection Act.

Site Map E-paper Subscribe Register LogIn
Site Map E-paper Subscribe Register LogIn