Prevent registration of venues in regions where Health Departments do not support luca
Venue Owners are legally required to facilitate contact tracing. The requirement stems from regional Corona-Schutzverordnungen (CoronaSchV).
Unfortunately, the current system does not prevent Venue Owners from registering venues for regions, where luca is not supported. This creates two serious problems:
-
The Venue Owner violates her duty to support CoronaSchV compliant contact tracing, since all data gathered via luca is completely worthless for the respective Health Department. The Health Department does not take part in the Daily Key Rotation and will hence never be able to decrypt the gathered contact data. It is fair to assume, that Venue Owners are not completely aware of the impact.
-
Customers and visitors checking into these venues via luca have a higher risk as opposed to using the traditional paper based process. Since the gathered data can never be used by a Health Department, those customers/visitors will never be warned - even if they were potentially exposed to another infected customer/visitor.
Solution: Prevent Venue Owners from registering locations for unsupported regions.
The below screenshot shows the current venue registration implementation in luca Locations. Luca precisely knows the physical location, down to the zip code level. It can easily reject the addition of locations for non-supported regions and should consider this its duty.
In parallel and to prevent further damage, we highly recommend to contact Venue Owners who have registered locations for unsupported regions and actively advice to not use luca in those locations. Since Luca did send out a newsletter to all Venue Owners on April 19th, 2021 I anticipate that contacting all Venue Owners is technically possible.