“I have no excuse to reject requests by the authorities to share my personal data when it is done in the name of public safety,” said Wang Junyao, a 29-year-old engineer in Shenzhen, who recently returned from the US after obtaining a doctorate.

“But what about when the virus ends? Surely the conflict between data collection and privacy will only intensify.”

While real-name registration and facial recognition have become commonplace for many daily activities in China, the practices are being extended to over-the-counter purchases of medicine and all forms of public transport.

In the southern province of Guangdong, local authorities said residents must register with their real names when purchasing fever and cough medications at pharmacies so that officials can follow up with them. In the tech hub of Shenzhen, commuters have recently been asked to provide their full names before they can use the subway.

New systems developed by tech companies including food delivery platform Meituan Dianping and Dida Chuxing, a rival of ride hailing giant Didi Chuxing, now require commuters around the country to provide their personal information by scanning QR codes before taking buses, trains and taxis. Those who refuse are not allowed to travel.

Hair clippers, consoles and condoms: What people are buying online during the coronavirus quarantine

“Going forward, the Chinese government will reinforce data collection and applications … mainly medical information, interpersonal data and shopping records, especially the purchase of medical supplies,” said Wang Xiaohui, deputy dean at the Institute of Internet Industry at Tsinghua University.

“Basic personal information such as income, address and transport data, already collected by the authorities, seems enough but the analysis models to satisfy the demands of public safety are apparently not sufficient.”

Misleading authorities about your travel history to avoid a mandatory quarantine order has also become a lot harder thanks to a verification system operated by the three state-run telecommunications providers.

For example, China Mobile subscribers can obtain proof of their travel history by texting CXMYD to a coronavirus hotline set up the telecoms operator. In response, the subscriber receives a list of places they have visited in the past two weeks, providing authorities with credible information which can be used to quarantine those who have been to an infected area.

Greater data collection has undoubtedly helped prevent the virus from spreading in China because it enables precise reporting of hotspots.

An epidemic map, published by Chinese search giant Baidu, shows the location of confirmed and suspected cases in real time so people can avoid going to the same places. Qihoo 360, China’s biggest cybersecurity company, is offering an app that lets users check if they have been on a train or plane with someone who contracted the virus.

The efforts to expand data collection is also in line with the central government’s desire to establish a nationwide medical database which can help authorities make quick and effective decisions in future major safety incidents.

In February Chinese president Xi Jinping called for sweeping improvements to China’s health emergency response system and earlier this month the national health commission issued a statement recommending strengthened data collection and analysis to support epidemic prevention and control.

“Data should play a role in epidemic diagnosis, treatment methods as well as improving service efficiency,” the statement said.

However, the rush to scoop up even more data to fight the outbreak has led to privacy breaches, especially for residents in the epicentre of Wuhan, some of whom had their names, addresses, daily movements and other personal data leaked on the internet amid the fear brought on by the spread of the disease.

Opinion | Can we find a balance between privacy and public safety in an epidemic?

“In the early stages of the epidemic prevention [in late January] … government departments, the media and the masses all disseminated personal information,” Liu Xiaochun, executive director of the internet law research centre at the Chinese Academy of Social Sciences University, wrote in an article.

“The leaked information could see these people become isolated and discriminated against.”

Industry observers are warning that moves to collect more information on the digital footprint and medical supply purchases of Chinese citizens must be balanced with personal privacy protection, otherwise it risks a resistance by those unwilling to share their most sensitive data.

“In order to reduce public anxiety over data privacy, we should enhance transparency for data collection, ensure the interest of the public, and clarify the scope for the rules,” said Liu Yuanxing, senior counsel at Beijing-based law firm King & Partners.

Tian Xianjin, a lawyer with Beijing-based DeHeng Law Offices, said, “We cannot rule out the possibility that more personal data will need to be shared and collected to improve public safety, even when the virus ends. But all [data] collection should be within the rules and regulations.”

Hong Kong-based law firm King & Wood Mallesons warned in a report that “medical information should be carefully handled when the virus ends” to avoid intensifying data privacy conflicts. “Any entity should obtain patients’ informed consent to process their data,” it said.

Existing regulations protecting personal information are included in the country’s Civil Law and Criminal Law but the central government is drafting a new law to protect personal data.

“China is reinforcing privacy protection but at the same time it will seek a balance between use of information for public safety and the protection of information," said Tian. “The Standing Committee of the National People’s Congress will arrange legislation of laws to protect personal information this year, and the balance might be reflected in it to some extent.”

The proposed law is expected to be a major step towards safeguarding citizens’ personal information, especially biometric data such as fingerprints and face scans.