The data of around 300,000 Swiss people who have registered on the electronic vaccination book meineimpfeungen.ch must be destroyed. This was decided by the Federal Data Protection and Information Commissioner (EDÖB), Adrian Lobsiger, as he announced on Tuesday evening.
The bankruptcy office in Berne had actually wanted to sell the sensitive personal data from the bankrupt estate privately to a private company when the foundation went bankrupt. The foundation went bankrupt with its electronic vaccination platform on November 17th.
Serious privacy issues
An external report dated November 15, 2021 had previously confirmed serious flaws in the platform’s data. This affected both content-related data such as incorrect tetanus and Covid-19 information and incorrect contact details. Lobsiger had already criticized these facts in his final report of August 2021.
In the long time since the final report, the platform operators have not been able to remedy the shortcomings, Lobsiger notes. You could not make the data available to the authorized users in a way that is justifiable in terms of data protection.
The data protection officer therefore assumes that any further data processing would lead to personal injury. These violations would outweigh the waiver of deletion demanded by the Foundation. Lobsiger has therefore instructed the bankruptcy office in Bern-Mittelland with a “formal recommendation to refrain from the planned private sale” and to delete the data. The bankruptcy office accepts that.
How do vaccinated people get their data now?
The meineimpfungen.ch platform with its electronic vaccination booklet was discontinued in May 2021 due to security gaps. At the end of March it became known that the 450,000 vaccination data on meineimpfungen.ch, including 240,000 from Covid-19 vaccinates, could be manipulated. As a result, the BAG and the Federal Data Protection and Information Commissioner became active.
The big question is: What about all the users who only registered their vaccinations on meinevaccinations.ch? How can they prove that they have been vaccinated against tetanus, polio, hepatitis and rabies?
And how many of the 300,000 users are there? The BAG, which regrets Lobsiger’s decision, does not want to comment on request and refers to Edöb, which Blick could not reach.
The foundation had already announced last year that it hoped that the majority of users had kept their data and that the vaccination certificates were also stored in the documentation with the health professionals. She recommends that users contact the doctor who vaccinated them to have their vaccinations checked or completed. (sf/SDA)