Variation number three to the
Agreement between
Accident Compensation Corporation
and
Ministry of Social Development
Technical Standards Report
ACC-MSD Weekly Compensation Match
October 2019
Page
1 of
3
1
Variation Agreement
1.1
This amendment to the agreement between ACC and MSD is made between the Chief Technology and
Transformation Officer of ACC and the Deputy Chief Executive, Service Delivery, of MSD.
2
Background
2.1
Information matching provided for by the Agreement between ACC and MSD ACC-MSD Weekly
Compensation Match (“The Agreement”) was first implemented in November 2005.
2.2
The purpose of this online information transfer between ACC and MSD is to:
2.2.1 Identify individuals whose MSD entitlements may have changes because they are receiving ACC
payments; and
2.2.2 Assist MSD in the recovery of outstanding debts.
2.3
An Assurance audit was conducted on 27 September 2018 as required by the Office of the Privacy
Commissioner. It was established that the statements related to the backup method to operate the
information share within the Technical Standards Report (TSR) are not reflective of how this would
currently be performed by MSD. It was confirmed with MSD management that an encrypted USB, as
opposed to CD, would be used for the manual transfer if the automated link were not operating.
3
Purpose of this Variation
3.1 The purpose of this Variation is to update the manual backup method from CD to encrypted USB.
4
Variation
4.1
In the most recent version of the TSR, delete current paragraph 4.1.3 (Transfer of Information) and
replace with:
“4.1.3 Ministry approved secure USBs or IronKeys are to be used as a back-up method of transfer if
required. The secure USB must comply with minimum security requirements including encryption
measures as specified in the latest version of the NZ Information Security Manual or its equivalent. If
the secure USB is to be used, the data is to be supplied to MSD in XML format.”
4.2
In the most recent version of the TSR, delete current paragraph 4.1.4 and replace with:
“4.1.4 The secure USBs are to be transported in a secure manner agreed by the parties.”
4.3
In the most recent version of the TSR, delete current paragraph 4.1.5 and replace with:
“4.1.5 Data supplied on secure USBs will be password protected and encrypted. The password will
be sent to the other party in a secure manner agreed by both parties.”
5
MSD TO APPEND VARIATION REPORT TO ORIGINAL REPORT AND PROVIDE COPY TO THE
OFFICE OF THE PRIVACY COMMISSIONER
5.1
MSD will append this signed Variation to the original TSR and provide a copy of the Variation Report as
soon as possible to the Office of the Privacy Commissioner.
Page
2 of
3
6
Commencement Date
6.1
This Variation comes into effect on the date on which it is signed by both Parties. In the event that one
of the Parties signs on a different day, this Variation will come into effect on the later day.
Signed by the Parties
Peter Fletcher
Viv Rickard
___________________________________
___________________________________
Chief Technology and Transformation Officer Deputy Chief Executive, Service Delivery,
On behalf of the Accident Compensation
Ministry of Social Development – I have a
Corporation
delegation under section 41 of the State
Sector Act 1988 to sign for MSD
___________________________________
___________________________________
Date
Date
Page
3 of
3
