[yanjost]

In fact you are processing health data because you decode the QR code.

Therefore you must implement HDS valid data treatments and policy

[lovasoa]

The HDS policy is for hosting health data, if I understand it correctly.