The Alberta government issued a release Thursday evening indicating the website to access the COVID-19 vaccine record QR Code suffered a possible privacy breach and subsequently shut down.
The news comes a day after residents could download a new version of their QR Code that provided access to their proof of vaccination.
“Protecting Albertans’ personal information is always our top priority, and I apologize for this potential breach,” said Health Minister Jason Copping in the government release. “Alberta Health took immediate action by taking the website and the updated record down.
He reassured Albertans that the Alberta government would keep residents in the loop and update them upon completion of the investigation. The health minister added that the updated record for travel would be available as soon as they addressed the technical issue.
The Office of the Information and Privacy Commissioner has been informed about the ongoing investigation into the potential privacy breach.
The technical problem remained under investigation late Thursday afternoon. The government added that the issue “does not appear to be caused by a security breach to the system.”
“Alberta Health’s support desk received 12 reports from Albertans that they got the wrong vaccine record when they entered their information on alberta.ca/CovidRecords,” reads the release. “The information that appeared on the record is the name, date of birth and the COVID-19 vaccination information.
“The QR code record is not connected to any other health or personal information.”
The new QR codes are provided to Albertans travelling domestically and internationally to meet federal travel requirements.
Albertans can use their records with a QR code at Alberta businesses taking part in the Restrictions Exemption Program and travelling. Other provinces’ apps can now scan the original Alberta QR code vaccine record.
The Restrictions Exemption Program allows eligible businesses, venues and services to be exempt from capacity, physical distancing and other operating restrictions.
Businesses that implement the program must continue to follow mandatory indoor masking requirements.
Anyone aged 12 and older is required to provide either proof of a complete vaccine series through their QR code or a negative, privately paid COVID-19 test from within the previous 72 hours to access events and businesses participating in the program.
A resident accessing a business, venue, or service with neither must show valid proof of a medical exemption.
Copping added that these changes “keep Albertans safe” and businesses operate effectively. “We continue to follow the evidence and update the guidance so the program can reduce the spread of COVID-19 in ways that make sense for Albertans,” he said.
The program does not apply to businesses or entities that need to be accessed for daily living. A complete list of in-scope and out-of-scope enterprises is available on the COVID-19 public health actions web page.
