In Canada, Québec introduced it's Covid-19 App "VaxiCode" on September 1; BC, "BC Vaccine Card", September 13, requirement in place until January 31, 2022, subject to extension; Ontario, September 22, "app to follow" on October 22. (CBC, CTV, Global).

Apparently, these are QR codes that lead to a shc scheme address, which IANA says is associated with a 2009 article in the New England Journal of Medicine, (details about the protocol.)

Can I view this information? What about requesting that it be deleted in the future?

1 Answer 1


You can read the information from the QR code with any QR code reader. That's what the reader app does, and you can extract the data from the QR code. As the spec says, it is stored as a compact serialization JSON Web Signature, and the claims are also outlined in the spec. It will be signed by a key specific to the province, which will verify its validity. The data is in a standard format and should be able to be read with a little bit of programming, or possibly some sort of generic application which can read this data, although I don't know of any such generic application.

As to whether you can request that it be deleted, that is specific to your jurisdiction. In Canada, provinces are responsible for health care, so they may have the ability to preserve certain information for public health reasons, or not, which will depend on the laws in the province and nationally about how health data may be stored and maintained. You would need to inquire with the appropriate governmental body or an attorney to determine the laws governing that.

  • So the QR code has an address which authenticates my data; it's not trivially spoofable, (SHC Reader says that it's an Amazon server in Columbus, Ohio.)
    – Neil
    Sep 15, 2021 at 4:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.