Tēnā koe
I acknowledge receipt of your three Official Information Act 1982 requests below, received by Police on 14 May 2024.

1. Could the NZ Police please provide the definition of "uplift" as used by the NZ Police and any legal definition(s) / advice they have with how that word is to be used.

2. Could the NZ Police please confirm all the valid ways to inform the Police / Firearms Safety Authority of any new / updated information.

From Regulation 37(1) of the Arms Regulations 1992:

"Except as otherwise provided in the Act or these regulations, information that the Act or these regulations require to be provided to the Police for the purposes of entry in the registry must be provided in a manner or form determined by the Commissioner."

Can you please provide the full list of "manner" and "form" that have been determined by the Commissioner. This must include the document(s) which list the methods and all legal advice to confirm the alignment with the all applicable NZ legislation.

Can you also provide the method(s) by which this information is easily accessible to any person with a firearms licence, e.g. a URL on the Police / Firearms Safety Authority website.

Can you confirm the publication date(s) (or similar as applicable to the method of publication).

3. The NZ Police Firearms Safety Authority goes into a significant level of detail about the security of data it holds on the following page of their website:

https://www.firearmssafetyauthority.govt...

Example text includes:
* "These are similar controls to what you would see at your bank"
* "robust authentication, including two-factor verification"
* "Its data security and privacy requirements have been assessed against government standards for the use of cloud-hosted services."

When the NZ Police Firearms Safety Authority sends a letter to a firearms licence holder it uses encrypted PDFs documents to keep information "secure". I am deliberately not providing details of this to help protect the use of security through obscurity.

Can the NZ Police confirm that the security of all communications align with the security requirements and guideance provided by the NZ Government Communications Security Bureau, especially, but not limted to, the following sections:
* 16.1.15
* 16.1.19
* 16.1.20
* 16.1.21
* 16.1.40.R.03
* 16.1.40.R.04
* 16.1.40.C.02
* 16.1.41.R.01

Section numbers are taken from version 3.7 of the NZISM (New Zealand Information Security Manual) which is available from the NZ Government Communications Security Bureau website:
* https://nzism.gcsb.govt.nz/ism-document/

Note that there are applications which will crack passwords on documents, including PDF documents, which can be easily obtained, with one example being Passware Kit Standard which has a free trial version (I have no connection with this organisation, this is just an example).

These have been combined and logged as one request. Your reference number is IR-01-24-16550.

You can expect a response to your request on or before 12 June 2024 unless an extension is needed.

Ngā mihi
Lisa
Ministerial Services
Police National Headquarters

show quoted sections