Dear New Zealand Police,

This is a follow-up to OIA Request IR-01-21-24600 (IR1) & IR-01-22-22371 (IR2) regarding police use of the CCTV collation/upload site CommunityCam (https://www.communitycam.co.nz/) and if NZ Police have completed a Privacy Impact Assessment (PIA) regarding use of the site.

Immediately below are some statements as context for my information requests:

In response to IR1 dated 6 September 2021 you stated:

"Any footage uploaded is encrypted to maintain security." (1)
"The site is now going through a thorough due diligence process to ensure that all security, privacy, legal and ethical factors are being reviewed and considered." (2)

At that time a PIA was not completed.

In response to IR2 dated 22 August 2022 you stated:

"No Privacy Impact Assessment has been undertaken". (3)
"No correspondence, memos, or other documentation regarding the privacy policies of www.communitycam.co.nz and Police’s use of the site have been located. This part of your request is therefore refused under section 18(e) of the OIA, as the requested information does not exist." (4)

Please provide the following information/documents:
1) The responses in IR1 indicate knowledge of CommunityCams privacy (2) and data storage policies (1) as of 06/09/21. Was NZ Police aware of a PIA/review being conducted by CommunityCam before 22 August 2022?
a) When did NZ Police become aware of the information provided in IR1?
b) Please provide information on how NZ Police came to the conclusion it did in IR1 when IR2 stated it held no information about the privacy policies or NZ Police's use of the site.
c) Please provide correspondence, memos, or other documentation regarding the privacy policies of www.communitycam.co.nz and Police’s use of the site as was available before 22/08/22.
d) Separately, please provide correspondence, memos, or other documentation regarding the privacy policies of www.communitycam.co.nz and Police’s use of the site after 22/08/22.
e) Has NZ Police completed a PIA for its use of CommunityCam? If so, please provide a copy and the date of initiation, completion, and scheduled review. If not, has NZ Police considered completing a PIA?
f) Please provide all documentation for the agreement of "Anton Maisey" to verify the confidentiality of CCTV footage uploaded to the site, as noted in the site FAQ under heading "Are NZ Police really the only ones who see my details?".
g) Please provide all information about the Police login page available at https://www.communitycam.co.nz/police-lo..., and the number of times it has been accessed if that information is available.
h) Please provide any MOU or similar contract NZ Police has with CommunityCam, if available.

Please provide this information in an accessible, searchable format without a watermark.
If any information needs to be withheld from a document, please ensure this is not done in a way that makes the surrounding content (such as other content on the same page) inaccessible.
Please provide both the reason for removal of information as well as the grounds in support of that reason as outlined by section 17(2)(b) of the Act.

Yours faithfully,

James B