The below FAQs help to explain what an Application Programming Interface (API) is, why the API has been developed and why third-party application providers are being asked to use it.
An Application Programming Interface (API) allows two separate systems to talk to each other.
The Victorian Government Visitation API allows third-party operators of ‘check-in’ or digital visitation record-keeping systems to connect to the Department of Health (DH) contact tracing system.
This means that in the event of a confirmed case of COVID-19, DH contact tracers will be able to access the information they need instantly. Information is only accessed in the event of a confirmed case being identified at a venue.
Third-party providers of digital visitation registration (check-in) platforms were required to connect to the Victorian Government Visitation API by 30 April 2021.
Information is only accessed if a confirmed case of COVID-19 is identified at your venue.
- Victorian businesses use a digital record-keeping check-in service (like a QR code).
- The service must be connected to the API.
- The API allows the service to connect directly to the Department of Health contact tracing system.
- Businesses that are not currently using approved applications have until 30 April 2021 to move to an approved app.
If you're running a business, organisation, club or event that is required to keep electronic records of visitors:
- The changes apply to all businesses using an (like a QR code). If you display a QR code to collect visitation data as per these directions, then you must use the or a .
Business owners should be using a digital record-keeping check-in service to record all workers and visitors who attend the premises for longer than 15 minutes. This is unless they are:
- operating a market, market stall, retail facility or retail shopping centre and it is not practical to record customers
- essential support groups and health services, if confidentiality is typically required (such as support groups for alcohol and drugs, or family violence).
Businesses may already meet the new requirements.
Third-party check-in services must be connected to the API. This is so they can share vital visitation information with our contact tracing team in a quick and seamless way.
If someone at your business organisation, club or event is a confirmed COVID-19 case:
- As a business owner, you must provide the name of their record-keeping provider.
- Contact tracers will instantly access the information they need if the service is connected to the API.
Information is only accessed if a confirmed COVID-19 case is identified at your venue.
- If you need to change providers because your current provider is not connected to the Victorian Government Visitation API, the is easy to use and is free for all Victorian businesses and organisations.
If someone at your business is confirmed to have COVID-19, contact tracers:
- will request check-in data or visitation records from a specific date and time range
- may ask third-party providers to search for specific phone numbers or locations.
Authorised Department of Health contact tracers will receive a:
- first name
- phone number
- date and time of visit.
This information will only be shared in the event of a confirmed case being identified at a location within the same timeframe you visited. Visitation data is kept for 28 days unless needed for contact tracing purposes.
The API is not available to self-built, internal systems. Only businesses offering COVID Visitation Register services commercially can connect to the API.
Reviewed 30 April 2021