The data-matching system where the Government checks whether MIQ workers are properly tested failed to detect the case of the Grand Millenium security guard, who should have been tested fortnightly but wasn't tested for five months.
The issue is highlighted in a series of MIQ reports released today by the Government, which highlight how reliant the system is on people to do the right thing, but also how the system wasn't showing workers who weren't being tested.
After the security guard tested positive for Covid-19 on April 7, it emerged he hadn't been tested since November, and his behaviour prompted Prime Minister Jacinda Ardern to say he had been lying.
The testing of MIQ workers is meant to be visible on the Border Workforce Testing Register (BWTR), but the register showed that the security guard was compliant with testing requirements until late March.
This is despite the guard, known as Case B, having his last test on November 27, and then being sent reminder texts about his tests from late February.
The BWTR did show the guard was non-compliant for a five-day period in March, but this was because of a lack of attendance data rather than the lack of testing, a report from KPMG said.
Other issues highlighted included how the employer, First Security in this case, isn't informed when the reminder texts to the worker are sent.
There are also texts or emails sent to the employer about workers' overdue test, but this function - described in the BWTR user manual - wasn't live until the end of April, well after the guard had tested positive.
Director-general of health Ashley Bloomfield said he wasn't concerned with the length of time it took - five to six months - to make this function operational, and officials worked on it as quickly as they could.
"These things can take time ... they did this as quickly as they could."
The BWTR also doesn't hold the results of tests, so it is up to workers to tell their employers if they test positive.
Bloomfield said that a series of processes are triggered at the lab when someone tests positive, though in this case it appears telling the employer wasn't one of them.
First Security didn't know about the positive test until the company called the guard the day after the positive result.
First Security could have discovered the guard had lied about having nine tests between December last year and March this year by running a detailed check, KPMG said.
"However, there was no pretext for doing so because Case B was not showing as being non-compliant on the BWTR 'chase list'."
The Government uses the WhosOnLocation (WOL) system - introduced in early February - to match workers at the border against the testing data in the BWTR. Logging into WOL triggers the testing cycle and schedules test dates, which then appears on the border worker's record in the BWTR.
But the report said the BWTR suffered from "delays in uploading data, and delays and inaccuracies in the linking of National Health Index (NHI) numbers with Person Profiles".
Before the guard's Person Profile and NHI number were linked - which happened on March 10 - First Security was unable to independently verify Case B's tests.
"The reason for this non-compliance was a lack of attendance data, not because Case B had not actually undergone tests," the report said.
"When Case B had their attendance logged through the WOL system on March 12, and when this data was uploaded, Case B's testing status changed to compliant."
First Security still can't view test dates for around 60 employees because their NHI numbers had not been linked, the report said.
And KPMG said WOL "may not accurately reflect attendance of border workers due, in part, to inconsistent use by individual workers and lack of enforcement at work sites".
The guard first used WOL on February 17, but didn't log on for every MIQ shift.
KPMG recommended site managers confirm the use of WOL, and spot checks to check compliance along with same-day data uploads for testing and attendance data.
"Access to testing is especially problematic for shift workers, particularly those with limited time and means and on irregular rosters. These factors can lead to tests not being taken within specified periods," the report said.
"This incident presents a timely reminder of the need to reinforce Governmental and societal expectations around border workforce testing. Testing remains a key component in New Zealand's defence against Covid-19."
First Security's internal review also showed that border workers were being asked by site managers to complete additional tasks beyond the scope of their duties.
"These additional tasks included cleaning down high-touch, common areas, such as lifts. Such tasks potentially exposed these workers to greater risk of infection."
First Security has now introduced daily audits of the BWTR against attendance records, and reiterating the importance of using the WOL system.
Head of MIQ Brigadier Jim Bliss said a number of recommendations have been made, and action in response is well underway.
Bliss acknowledged that the system "could always be better".
He said the latest data showed only 4 per cent of border workers were being non-compliant.
"What happened should not have happened, but we are in a much better position now," Bliss said.
The BWTR and WOL systems had been improved, and it was now less of a high-trust model, he said.
Bliss said border workers now had to use WOL when they entered a work site, including airports and sea ports, and there was now an MBIE team that "interrogated" the BTWR data each week.
The team, which was set up six weeks ago, worked with employers to ensure those workers who need to be tested were being tested.
Workers also had to show evidence of their tests to their employers, he said.
Bloomfield said the systems would now be able to tell if any border worker - including any MIQ worker - wasn't being tested, even if they were lying about their test or their employer wasn't keeping proper records.
Other reports released today were into the probable aerosol transmission in the hallway at the Grand Millennium and via the ventilation system between floors at the Grand Mercure in Auckland.
There was also a breach of protocol on the bus to and from exercise areas by those staying at the Grand Mecure.
The Grand Mercure and Grand Millennium in Auckland will remain unoccupied until mid-June when their ventilation systems are upgraded and they can more safely house people coming to New Zealand from overseas.
"Remediation work at the Grand Mercure is almost complete. An extensive assessment of the Grand Millennium's ventilation system has been done and a remediation plan is being developed," Bliss said.
"A programme of extensive reviews and remediation of ventilation systems across all managed isolation facilities is underway."
Those included removing barriers to access testing, and continuing to improve data management systems.
Bloomfield stressed that the overall risk of Covid-19 leaking from MIQ into the community remained "very low".
He said 95 per cent of MIQ workers now had two doses of the Pfizer vaccine, and by June 5 all of them will have to have had two doses.