29 Oct 2021

Privacy Foundation concerned ACC management dropped the ball on privacy

From Midday Report, 12:14 pm on 29 October 2021

The Privacy Foundation wants evidence ACC is undertaking the two-yearly privacy audits it committed to in 2012, to help it stay on track with much-needed improvements to its operations.

The Foundation says the last known audit was done in 2014 - RNZ has asked ACC for comment on that matter. The agency's response is below.

ACC has stood down 14 staff this week for inappropriately sharing client information on social media groups. 

The chair of privacy foundation, and associate professor of commercial law at Auckland University Gehan Gunasekara talks to Māni Dunlop.

Post-script:

The following ACC comment was received from a spokesperson after the interview took place:

"There have been a range of ongoing internal and external risk and assurance across ACC including privacy on an ongoing basis.  In relation to privacy some external reviews include 2012, 2014, 2016 and 2018 reviews by KPMG and as part of annual Internal Audit programmes," an ACC spokesperson told RNZ. 

The statement did not say whether the reports were publicly released.