22 September 2021
Matthew Chipping
[FYI request #16371 email]
Tēnā koe Matthew
Your Official Information Act request, reference: GOV-013355
Thank you for your request of 10 August 2021, asking for the fol owing information under the Official
Information Act 1982 (the Act):
1.
Has your agency contracted work to Research New Zealand in the last five years?
2.
If so, did you provide private information or data on individuals to Research New Zealand?
3.
If so, what agreements did you make with Research New Zealand regarding privacy and data
retention?
4.
Have you been notified of any data breaches, security issues, or privacy issues with Research
New Zealand?
On 3 September 2021, we wrote to you to advise that we were extending our timeframe to make a
decision on your request until 28 September 2021.
We have responded to each of your questions in turn
below.
1.
Has your agency contracted work to Research New Zealand in the last five years?
2.
If so, did you provide private information or data on individuals to Research New Zealand?
Yes, ACC has contracted work to Research New Zealand in the last five years.
Research New Zealand has been contracted to undertake client surveys on behalf of ACC. To do this,
ACC supplies Research New Zealand with names and contact details of ACC clients. The authorisation for
the sharing of these details is included in the ACC45 claim lodgement form where it states clients give
permission for the release of relevant information (e.g name and contact details) for the purpose of
research into injury prevention and rehabilitation.
3.
If so, what agreements did you make with Research New Zealand regarding privacy and data
retention?
Research New Zealand completed a data security check conducted by our Privacy and Information
Security teams. In addition to this, Research New Zealand is expected to comply with the Health
information Privacy Code 2020 and the Privacy Act 2020, as wel as any obligations they have to keep
records under the Public Records Act 2005. Please refer to the excerpt, at the end of this letter, taken
from the Service Agreement between ACC and Research New Zealand, for more information.
It should be noted that if legislation such as the Health Information Privacy Code, Privacy Act or Public
Records Act are updated during a contract term, the expectation is that the latest legislation is complied
with.
GOV-013355
4.
Have you been notified of any data breaches, security issues, or privacy issues with Research
New Zealand?
ACC has not been notified of any data breaches, security issues or privacy issues regarding Research
New Zealand.
How to contact us
If you have any questions, you can email me a
t [email address].
Nāku iti noa, nā
Sasha Wood
Manager Official Information Act Services
Government Engagement & Support
Accident Compensation Corporation
Page 2 of 3
GOV-013355
Excerpt from Service Agreement between ACC and Research New Zealand
Accident Compensation Corporation
Page 3 of 3
Document Outline
