Dear Accident Compensation Corporation,

Please find the background and context associated with my Official Information requestsToday.

I refer you to the decision dated 21 July 2017 of the Human Rights Review Tribunal in [2017] NZHRRT 26 Reference No. HRRT 073/2015 issued with respect to the Privacy Act 1993 with remedy sought by Raymond Keith Williams as Plaintiff and the Accident Compensation Corporation as Defendant form which I quote the following;

"[26.3] ACC has a broad strategic focus on privacy. In 2013 it adopted a
comprehensive Privacy Strategy which has since been superseded by a Privacy
Maturity Plan, which formalises ACC’s approach to continue to improve ACC’s
privacy maturity between now and 2020. As noted at the outset of this Plan
“effective management of our customers’ information is an essential element in
creating a unique partnership with all New Zealanders”. ACC is committed to
building on and strengthening its approach to privacy.

[26.4] Both ACC’s privacy policy and the Privacy Maturity Plan are readily
available to all ACC staff members. These documents are supported by a set of
privacy policies specific to each of the twelve information privacy principles. "

**************************************************************************************************************
I will email Government Services today for your quick reference, a copy of this referred decision following me sending this Official Information Request.

Requests for Official Information;

Request 1:

(a) I welcome the provision to me through the www.fyi.org.nz, a complete copy of the comprehensive Privacy Strategy ACC adopted in 2013 as referred to in the Human Rights Review Tribunal ruling referred to above under [26.3].

(b) please confirm the exact 2013 date that ACC formally adopted their comprehensive Privacy Strategy.

Request 2:

I welcome the provision to me through the www.fyi.org.nz, a complete copy of the ACC privacy policy that was put into effect as a direct result of ACC's comprehensive Privacy Strategy being adopted by ACC in 2013, and any amendments and or iterations that were introduced by ACC that occurred prior to ACC superseding their comprehensive Privacy Strategy with ACC's Privacy Maturity Plan.

Request 3:

(a) I welcome the provision to me through the www.fyi.org.nz, a complete copy of the ACC Privacy Maturity Plan which as recorded based on information supplied to the Human Rights Review Tribunal by ACC's Privacy Representative, Ms Colman who is employed as a Privacy Officer, who at the time of the tribunal being conducted held the role with in ACC of Principal Advisor (Privacy Officer) in ACC’s Privacy Team:-

1. formalises ACC’s approach to continue to improve ACC’s privacy maturity between now and 2020, and

2. superseded the comprehensive Privacy Strategy adopted by ACC in 2013,

and any and all amendments and or iterations that were introduced by ACC that occurred following the introduction of ACC's Privacy Maturity Plan.

(b) please confirm the exact date that ACC formally adopted their ACC Privacy Maturity Plan.

I respectfully request that this information be made available to me in full under urgency within the next 15 working days, being by the end of business close on the 18th December 2017, with my reasons as follows;

i). The Human Rights Review Tribunal decision referred to has relevance to current matters that I have, and continue in my attempts to reasonably resolve with the Corporation involving matters of the use of inaccurate, out of date, incomplete, non relevant, and misleading information that the Corporation was asked to cease using in review submissions, prior to the commencement of a number of review proceedings.

ii). The information provided to me will allow me to put together in an informed manner my complaint to the Privacy Commission over the Corporation's breach of my rights, under Principal 8 of the Privacy Act, by having knowingly continued to rely on inaccurate, out of date, incomplete, non relevant, and misleading information provided to ACC by several treatment providers, without formally addressing the privacy policy remedies that I requested.

iii). within [26.4] of the NZHRRT's decision it states that

"Both ACC’s privacy policy and the Privacy Maturity Plan are readily
available to all ACC staff members. These documents are supported by a set of
privacy policies specific to each of the twelve information privacy principles. "

And therefore half of the information that I am currently seeking is readily available as accessible.

The other half of the information that I seek being the superseded information relating to ACC's prior comprehensive Privacy Strategy, and ACC's policy associated with the stated 2013 comprehensive Privacy strategy, should also be held within ACC's Privacy Office due to it's recency, in a manner that is both readily available, and therefore easily accessible for provision to myself.

I thank you for your time and assistance and respectfully request that under s16(2) of the Official Information Act, my preferred way of receiving a response is by email to the address from which ACC received the original request, not by post.

Yours faithfully,

David Lawson