Home›Questions on Notice›QoN 5746

❓ Question regarding data privacy and security of a game app (Crossy Road) on the Patient Entertainment System (PES) in WA hospitals, focusing on potential data access by the vendor (Yodo1 Games, based in Beijing).

AnsweredQoN 5746Legislative Assembly

Asked

13 November 2019

Member

Mr Z.R.F. Kirkup

Portfolio

Deputy Premier; Minister for Health; Mental Health

QuestionView source ↗

I refer to the response to Question on Notice 5480 in relation to the app provided by Yodo1 Games on the Patient Entertainment System (PES), and ask: (a) Will the Minister table the Incoming Sponsorship Authorisation Form; (b) Can the Minister confirm whether the vendor is provided with any of the following details, as a result of the app being on the PES: (i) IP address and computer/mobile device identifiers (such as device ID, advertising ID, MAC address and IMEI); (ii) Data about the device, such as device name and operating system, browser type and language; (iii) Data collected with advertising cookies; (iv) Coarse location data (country or city-specific); (v) Demographic data (such as to determine the coarse location of IP addresses); (vi) Data for advertising and analytics purposes; and (vii) Patient identifying data (names, ages, genders etc.); (c) Where is the vendor based; (d) What is the app that is provided by the vendor; and (e) What is the estimated value to the vendor?

AnswerView source ↗

Answered

11 February 2020

Response time

6 days

I am advised:
(a) Yes. See tabled paper no.
(b)(i) Vendor can read: Device ID, IMEI, Advertising ID.
Vendor cannot read: MAC address.
(ii) Vendor can read: Device Name, Operating System, Browser Type, Device Language.
(iii) This is possible, given current permissions.
(iv) Content can read: Coarse Location (city specific).
(v)-(vii) No.
(c) Beijing, China.
(d) Crossy Road.
(e) Unknown.

View on Parliament of WA