THE VIBES.COM
BY A.AZIM IDRIS Published on 22 Oct 2020 10:57AM ·
Selangkah app creator says its website and database have AES 256 encryption, defence and monitoring technology to safeguard sensitive information. – Pic courtesy of Selangkah, October 22, 2020
KUALA LUMPUR – The Selangor government’s Selangkah Covid-19 contact tracing app takes the appropriate technical and organisational measures to ensure personal data security, its creator said today.
This came after Health Director-General Tan Sri Dr Noor Hisham Abdullah on Monday expressed concern over the confidential data collected by Selangkah.
Dr Helmi Zakariah, who is on the Selangor Task Force for Covid-19 (STFC) member, said its website and database have AES 256 encryption, defence and monitoring technology to safeguard sensitive information.
“The platform was initially rolled out as a pioneer QR-based contact tracing, but since then it has undergone multiple development cycles, and now provides many functionalities for the state’s Covid-19 coordination,” he told The Vibes.
In explaining what is being done to the data collected by the app, Dr Helmi pointed to a thread on Twitter that provided the basic functions of the app.
“Each time you scan a Selangkah QR code, we capture your name and your phone number, and create a timestamp of your visit,” the thread explained.
“These are the only data that you crowdsource. Eventually, with many more people scanning, it creates a data lake of visitor logs across premises.”
The visitor logs, Selangkah said, were merely collected for the purpose of contact tracing, a functionality that is only available for public health personnel.
Dr Helmi said through Selangkah, state officers and local authorities could rely on a centralised dashboard to monitor population movement and overcrowding situations.
“Contextual surveys were intermittently posted to the public to remind, educate, and alert the public of the need for SOP compliances.
“Public reports were used to determine the area of non-compliances, so enforcement and community educators can be mobilised when needed.”
Meanwhile, Dr Noor Hisham’s concerns over Selangkah’s data security came after the state government accused the ministry of hampering its efforts to combat the pandemic by denying it granular data.
In response, Dr Helmi said Selangkah was about community empowerment and runs in harmony with the ministry’s prevent and educate, practice, comply and monitor (CAPP) strategy to avoid the 3Cs – crowded places, confined spaces and close conversation.
He added Selangkah encouraged users to practice the Health Ministry’s 3Ws – frequent washing of hands, wearing of face masks in public place, and practise caution by avoiding handshakes, staying at home and seeking treatment if you are developing symptoms related to Covid-19.
“Additionally, through its wide presence previously, the Selangkah platform is used as an additional tool to identify and connect citizens to the state economic stimulus and welfare package.”
For businesses and premises, Dr Helmi said the platform has allowed them to monitor the footfall to their respective premises for better human resource management and to avoid overcrowding.
“Some premises can opt for a pre-booking function if they choose to regulate visitor attendance.”
Customers, through the Covid-19 map functions found on the receipt, can opt to visualise an updated map of recently affected premises, and their date of sanitisation, to assure them of their visits.
Customers would also be able to cross-check their visit records with a reported incidence through the “Check Your Exposure Risk” feature in the app.
For enforcement officers, Selangkah has a “Visitor List” function, so logging practice can be checked while protecting the customers’ phone numbers.
“We masked the phone numbers and only showed the last 4 digits for enforcement purposes,” Dr Helmi said. – The Vibes, October 22, 2020
