Data deal denial thwarts NSW plans for Covid passport

The NSW government’s plan to include a Covid vaccination certificate within the Service NSW app has been thwarted by the federal government.

NSW Minister for Customer Service Victor Dominello. Picture: Getty Images

The NSW government’s plan to include a Covid vaccination certificate within the Service NSW app has been thwarted after the federal government refused to share necessary health data.

The Service NSW app is used for accessing a series of state-based services such as renewing registrations and checking fines and demerit points. As with similar apps in other states, it is used for Covid QR code check-ins and has been used to distribute $25 food and entertainment vouchers to residents.

In February, NSW Minister for Customer Service Victor Dominello told The Australian he wanted to include a Covid vaccination passport in the app.

He said the federal government would obviously control the Covid vaccination register, but he believed NSW citizens should be allowed to download a vaccination certificate to the Service NSW platform as a secure asset.

A source told The Australian the federal government would not share the required data.

In defending the move, Minister for Government Services Linda Reynolds said there were strict privacy laws for vaccination data and the Australian government would not weaken those protections.

The knock-back comes amid concern about the security and ease of forgery of the federal Covid vaccination certificate as both a downloadable file and when viewed in certain apps on smartphones.

Digital security firm Trax Print chief technology officer Robert Ablinger said cyber criminals were capable of forging a QR code verification system similar to what appeared to be planned for Australia.

Unvaccinated people desperate to travel on aircraft, enter an aged care facility or stadium could photoshop a certificate and fool an attendant briefly glancing at multiple certificates at entry points.

It seems the version of the vaccination certificate accessed within the Express Plus Medicare app may end up the preferred option for checking a vaccine record is genuine. Certificates in Apple Wallet or Google Pay don’t offer some of the Medicare app certificate’s security features.

“The version of the certificate available in the Express Plus Medicare app has several anti-fraud measures, including an animated tick, a live clock, and a shimmering Coat of Arms,” Senator Reynolds said.

“People can choose to add this certificate to their Apple or Google Digital wallet if this suits them. We expect the technology and the anti-fraud measures will continue to evolve.”

The technology around the certificates has experienced teething problems. Some people have had trouble viewing their vaccination certificate, citing difficulty logging into Services Australia and Medicare online portals.

In some cases, COVID vaccinations haven’t appeared on immunisation records of NSW residents. The NSW Government has created an online form to handle record discrepancies.

It lists four locations where this is an issue: the NSW Health Vaccination Centre at Sydney Olympic Park, and vaccination centres at Royal Prince Alfred Hospital, Sydney Airport and Canterbury Hospital.

Senator Reynolds said Services Australia made iterative enhancements to the vaccination register in preparation for the COVID-19 vaccine rollout, including bolstering system capacity and stand-alone COVID-19 vaccination certificates.

It is understood those whose immunisation history is missing information can contact their vaccination provider who can initiate the required updates.

Forgeries of vaccination certificates are a major issue with international fraudsters selling fake Australian Covid certificates for as little as $120, claiming they are identical to the real ­certificates and that they will never reveal the identities of their clients.

One online counterfeiter told The Australian they had already fulfilled more than 200 orders for Australians keen to subvert the nation’s official vaccination database, and had fielded inquiries from at least 900 others.

Authorities are beginning to impose large fines and in the US even jail terms may be possible for people who tender fake vaccination certificates. Last week two US travellers who arrived in Canada and tendered forged vaccination certificates were fined $CA19,720 each.

Earlier this year the FBI warned the US public against making or buying vaccination certificates. It said replicating US federal government agency seals such as the US Centres for Disease Control and Prevention is a crime which could lead to a five-year prison term and a fine.