Last week, the Herald pointed out that a My Vaccine Pass is emailed out as an editable PDF. That means a person can easily change the name, birth date or expiry date of the pass that appears on their phone's screen, or that they print out.
The Ministry of Health said that was not a major issue, because those confirming a person's vaccination status would scan the QR code on the pass, which could not be edited. The NZ Pass Verifier app would also automatically reject a pass with an expired date (as recorded by its QR code), whatever is written on the document.
That's all well and good if a business has someone on the door actively scanning the passes.
But if they ease things along by just sighting a pass, then being able to edit it will become an issue.
Ardern said yesterday: "The Verifier App - as we've said all along, handy tool, but it is not a requirement to operate. You can sight someone's vaccine pass. And if you have any concerns, you can ask for verifying ID, if you like."
But it's not like, say, the age requirement for buying alcohol, where youthful appearance will trigger a bouncer to ask for ID.
There's no such obvious "tell" that a person has edited the expiry date on their pass - or, if they don't know their way around Adobe Acrobat - that they have simply borrowed someone else's.
Another jape going around social media: just take a screen grab of your Vaccine Pass, then share it with someone else.
A photo ID on the vaccine pass is the obvious solution, but probably not one that was tenable for a pass programme where one of the contracts wasn't signed until October 13.
Starting much earlier during the 16-month gap we had between the first lockdowns and Delta could probably have meant that was a goer (earlier, the MoH said it wanted to hang fire to see what vaccine certificate initiatives were developed overseas).
Ardern said such casual checks were "no different from what most countries around the world are doing. Our Verifier app is actually an additional tool that not everyone internationally has used. It's a handy tool, because it gives you confidence that the pass you've been shown is indeed a valid pass, but it is not a requirement."
The Verifier Pass is now available on Apple and Google's app stores.
The Government says Vaccine Passes will be required once the country moves to the traffic light system - a move expected within days of the November 29 decision date.
A Vaccine Pass will not be required for entry to a supermarket, school or pharmacy, or to use public transport but "may" need to be scanned before you can enter a retail or hospitality venue, a concert or sports event, or a faith-based gathering.
The Herald has asked the MoH and the Government if they can clarify where scanning a Vaccine Pass will be mandatory for a business, and where it will be voluntary.
Businesses with questions about it are being referred to the Ministry of Heath's Verifier website, or their 0800 number.
They can also call 0800 800 606 or email VerifierTechHelp@mycovidrecord.min.health.nz
