PDPC has developed the Advisories on Collection of Personal Data for COVID-19 Contact Tracing and Use of SafeEntry (accessible online here) that addresses personal data protection concerns.
Businesses should as far as possible use a dedicated device to install the SafeEntry (Business) app for the scanning of TT Tokens. However, if they are unable to use a dedicated device, businesses may use personal devices.
When the TT Token is scanned by the SafeEntry (Business) app, only the last 4 alphanumeric characters of the NRIC/FIN is displayed. The data collected is not stored locally in the device. It is sent directly to a Government server, which will only be accessed by the authorities when required to prevent and control the transmission of COVID-19.