Uplift - definition
J Dough made this Official Information request to New Zealand Police
This request has an unknown status. We're waiting for J Dough to read a recent response and update the status.
From: J Dough
Dear New Zealand Police,
Could the NZ Police please provide the definition of "uplift" as used by the NZ Police and any legal definition(s) / advice they have with how that word is to be used.
As per Section 112 of the Official Information Act 1982 I can confirm that I am entitled to make requests under this Act as I satisfy criteria as listed in Section 12(1) as being someone who may make requests under the Act, which includes residing in New Zealand.
All information should be shared via the FYI.org.nz website (as per the guidance on https://fyi.org.nz/body/new_zealand_police).
Yours faithfully,
J Dough
From: Ministerial Services
New Zealand Police
Tēnā koe
I acknowledge receipt of your three Official Information Act 1982 requests below, received by Police on 14 May 2024.
1. Could the NZ Police please provide the definition of "uplift" as used by the NZ Police and any legal definition(s) / advice they have with how that word is to be used.
2. Could the NZ Police please confirm all the valid ways to inform the Police / Firearms Safety Authority of any new / updated information.
From Regulation 37(1) of the Arms Regulations 1992:
"Except as otherwise provided in the Act or these regulations, information that the Act or these regulations require to be provided to the Police for the purposes of entry in the registry must be provided in a manner or form determined by the Commissioner."
Can you please provide the full list of "manner" and "form" that have been determined by the Commissioner. This must include the document(s) which list the methods and all legal advice to confirm the alignment with the all applicable NZ legislation.
Can you also provide the method(s) by which this information is easily accessible to any person with a firearms licence, e.g. a URL on the Police / Firearms Safety Authority website.
Can you confirm the publication date(s) (or similar as applicable to the method of publication).
3. The NZ Police Firearms Safety Authority goes into a significant level of detail about the security of data it holds on the following page of their website:
https://www.firearmssafetyauthority.govt...
Example text includes:
* "These are similar controls to what you would see at your bank"
* "robust authentication, including two-factor verification"
* "Its data security and privacy requirements have been assessed against government standards for the use of cloud-hosted services."
When the NZ Police Firearms Safety Authority sends a letter to a firearms licence holder it uses encrypted PDFs documents to keep information "secure". I am deliberately not providing details of this to help protect the use of security through obscurity.
Can the NZ Police confirm that the security of all communications align with the security requirements and guideance provided by the NZ Government Communications Security Bureau, especially, but not limted to, the following sections:
* 16.1.15
* 16.1.19
* 16.1.20
* 16.1.21
* 16.1.40.R.03
* 16.1.40.R.04
* 16.1.40.C.02
* 16.1.41.R.01
Section numbers are taken from version 3.7 of the NZISM (New Zealand Information Security Manual) which is available from the NZ Government Communications Security Bureau website:
* https://nzism.gcsb.govt.nz/ism-document/
Note that there are applications which will crack passwords on documents, including PDF documents, which can be easily obtained, with one example being Passware Kit Standard which has a free trial version (I have no connection with this organisation, this is just an example).
These have been combined and logged as one request. Your reference number is IR-01-24-16550.
You can expect a response to your request on or before 12 June 2024 unless an extension is needed.
Ngā mihi
Lisa
Ministerial Services
Police National Headquarters
-----Original Message-----
From: J Dough <[FOI #26781 email]>
Sent: Tuesday, 14 May 2024 12:39 PM
To: Ministerial Services <[email address]>
Subject: [EXTERNAL] Official Information request - Uplift - definition
CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.
Dear New Zealand Police,
Could the NZ Police please provide the definition of "uplift" as used by the NZ Police and any legal definition(s) / advice they have with how that word is to be used.
As per Section 112 of the Official Information Act 1982 I can confirm that I am entitled to make requests under this Act as I satisfy criteria as listed in Section 12(1) as being someone who may make requests under the Act, which includes residing in New Zealand.
All information should be shared via the FYI.org.nz website (as per the guidance on https://fyi.org.nz/body/new_zealand_police).
Yours faithfully,
J Dough
-------------------------------------------------------------------
This is an Official Information request made via the FYI website.
Please use this email address for all replies to this request:
[FOI #26781 email]
Is [New Zealand Police request email] the wrong address for Official Information requests to New Zealand Police? If so, please contact us using this form:
https://fyi.org.nz/change_request/new?bo...
Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers
If you find this service useful as an Official Information officer, please ask your web manager to link to us from your organisation's OIA or LGOIMA page.
-------------------------------------------------------------------
===============================================================
WARNING
The information contained in this email message is intended for the addressee only and may contain privileged information. It may also be subject to the provisions of section 50 of the Policing Act 2008, which creates an offence to have unlawful possession of Police property. If you are not the intended recipient of this message or have received this message in error, you must not peruse, use, distribute or copy this message or any of its contents. Also note, the views expressed in this message may not necessarily reflect those of the New Zealand Police. If you have received this message in error, please email or telephone the sender immediately
hide quoted sections
From: Ministerial Services
New Zealand Police
Tēnā koe
Please find attached the response and documentation relating to your
Official Information Act request, received by Police on 14 May 2024.
Ngā mihi
McCoy
Ministerial Services
Police National Headquarters
===============================================================
WARNING
The information contained in this email message is intended for the
addressee only and may contain privileged information. It may also be
subject to the provisions of section 50 of the Policing Act 2008, which
creates an offence to have unlawful possession of Police property. If you
are not the intended recipient of this message or have received this
message in error, you must not peruse, use, distribute or copy this
message or any of its contents. Also note, the views expressed in this
message may not necessarily reflect those of the New Zealand Police. If
you have received this message in error, please email or telephone the
sender immediately
From: J Dough
Dear Ministerial Services,
Q1
I am most surprised that the Police are unable to provide a definition of the word “uplift”.
Using the search function on the NZ Police website to search for the use of the word “uplift”, there are 94 occurrences (as of 24th June 2024), as shown in the link - https://www.police.govt.nz/search-result....
If this word is not defined, why is the NZ Police using the term?
Q2
This response is very incomplete, with the bulk of the question being ignored and the response being only covering directing me to the website.
What has not been answered is:
• “the document(s) which list the methods”
• All legal advice
• The publication date(s)
Can you review your initial response and provide a full response.
Q3
The question very clearly talks about the NZ Police Firearms Safety Authority sending a letter to a firearms licence holder using encrypted PDFs.
An encrypted PDF uses a password to encrypt the data, with the intention that only the person to whom the PDF was being sent to can decrypt the file and view the unencrypted contents.
Personably Identifiable Information (PII) data in letters from the NZ Police Firearms Safety Authority will contain data from the Firearms Registry.
The Firearms Registry has been classified at the RESTRICTED level (https://www.firearmssafetyauthority.govt...).
The New Zealand Information Security Manual (NZISM) covers details across IT and related systems, which will include the protection of information which has been classified at the restricted level.
The requirements around passwords is covered in Section 16 (https://nzism.gcsb.govt.nz/ism-document?...).
Section 16.1.40.C.02 covers the password requirements that any system with a security classification (i.e. including restricted) should meet, which is:
“a minimum password length of ten characters, consisting of at least three of the following character sets:
lowercase characters (a-z);
uppercase characters (A-Z);
digits (0-9); and
punctuation and special characters.”
Can you confirm that the password used to encrypt PDFs which contain information at the restricted level meets the requirements of Section 16.1.40.C.02 in the NZISM?
Clearly, I do not believe that the requirements of Section 16.1.40.C.02 in the NZISM are being met.
I will not disclose further details of this issue in a public forum. Can you provide an email address to which I can send an encrypted explanation of this issue.
Yours sincerely,
J Dough
From: Ministerial Services
New Zealand Police
Tçnâ koe
I acknowledge receipt of your Official Information Act 1982 request below, received by Police on 24 June 2024.
Your reference number is IR-01-24-22437.
You can expect a response to your request on or before 23 July 2024 unless an extension is needed.
Ngâ mihi
Lisa
Ministerial Services
Police National Headquarters
-----Original Message-----
From: J Dough <[FOI #26781 email]>
Sent: Monday, 24 June 2024 4:08 pm
To: Ministerial Services <[email address]>
Subject: [EXTERNAL] Re: OIA response - IR-01-24-16550
CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.
Dear Ministerial Services,
Q1
I am most surprised that the Police are unable to provide a definition of the word “uplift”.
Using the search function on the NZ Police website to search for the use of the word “uplift”, there are 94 occurrences (as of 24th June 2024), as shown in the link - https://www.police.govt.nz/search-result....
If this word is not defined, why is the NZ Police using the term?
Q2
This response is very incomplete, with the bulk of the question being ignored and the response being only covering directing me to the website.
What has not been answered is:
• “the document(s) which list the methods”
• All legal advice
• The publication date(s)
Can you review your initial response and provide a full response.
Q3
The question very clearly talks about the NZ Police Firearms Safety Authority sending a letter to a firearms licence holder using encrypted PDFs.
An encrypted PDF uses a password to encrypt the data, with the intention that only the person to whom the PDF was being sent to can decrypt the file and view the unencrypted contents.
Personably Identifiable Information (PII) data in letters from the NZ Police Firearms Safety Authority will contain data from the Firearms Registry.
The Firearms Registry has been classified at the RESTRICTED level (https://www.firearmssafetyauthority.govt...).
The New Zealand Information Security Manual (NZISM) covers details across IT and related systems, which will include the protection of information which has been classified at the restricted level.
The requirements around passwords is covered in Section 16 (https://nzism.gcsb.govt.nz/ism-document?...).
Section 16.1.40.C.02 covers the password requirements that any system with a security classification (i.e. including restricted) should meet, which is:
“a minimum password length of ten characters, consisting of at least three of the following character sets:
lowercase characters (a-z);
uppercase characters (A-Z);
digits (0-9); and
punctuation and special characters.”
Can you confirm that the password used to encrypt PDFs which contain information at the restricted level meets the requirements of Section 16.1.40.C.02 in the NZISM?
Clearly, I do not believe that the requirements of Section 16.1.40.C.02 in the NZISM are being met.
I will not disclose further details of this issue in a public forum. Can you provide an email address to which I can send an encrypted explanation of this issue.
Yours sincerely,
J Dough
-----Original Message-----
Tçnâ koe
Please find attached the response and documentation relating to your Official Information Act request, received by Police on 14 May 2024.
Ngâ mihi
McCoy
Ministerial Services
Police National Headquarters
===============================================================
WARNING
The information contained in this email message is intended for the addressee only and may contain privileged information. It may also be subject to the provisions of section 50 of the Policing Act 2008, which creates an offence to have unlawful possession of Police property. If you are not the intended recipient of this message or have received this message in error, you must not peruse, use, distribute or copy this message or any of its contents. Also note, the views expressed in this message may not necessarily reflect those of the New Zealand Police. If you have received this message in error, please email or telephone the sender immediately
-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #26781 email]
Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers
If you find this service useful as an Official Information officer, please ask your web manager to link to us from your organisation's OIA or LGOIMA page.
-------------------------------------------------------------------
===============================================================
WARNING
The information contained in this email message is intended for the addressee only and may contain privileged information. It may also be subject to the provisions of section 50 of the Policing Act 2008, which creates an offence to have unlawful possession of Police property. If you are not the intended recipient of this message or have received this message in error, you must not peruse, use, distribute or copy this message or any of its contents. Also note, the views expressed in this message may not necessarily reflect those of the New Zealand Police. If you have received this message in error, please email or telephone the sender immediately
hide quoted sections
From: Ministerial Services
New Zealand Police
Tēnā koe
Please find attached the response to your Official Information Act
request, received by New Zealand Police on 24/06/2024.
Kind regards,
Ministerial Services
Police National Headquarters
===============================================================
WARNING
The information contained in this email message is intended for the
addressee only and may contain privileged information. It may also be
subject to the provisions of section 50 of the Policing Act 2008, which
creates an offence to have unlawful possession of Police property. If you
are not the intended recipient of this message or have received this
message in error, you must not peruse, use, distribute or copy this
message or any of its contents. Also note, the views expressed in this
message may not necessarily reflect those of the New Zealand Police. If
you have received this message in error, please email or telephone the
sender immediately
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence
Offensive? Unsuitable?
Requests for personal information and vexatious requests are not considered valid requests for Official Information (read more).
If you believe this request is not suitable, you can report it for attention by the site administrators
Report this requestAct on what you've learnt
Similar requests
Ways to inform the Registry - Regulation 37(1) of the Arms Regulations 1992
To New Zealand Police by J Dough
