Official Information request about ACC's privacy strategy, privacy plans and privacy policies.

David Lawson made this Official Information request to Accident Compensation Corporation

The request was successful.

From: David Lawson

Dear Accident Compensation Corporation,

Please find the background and context associated with my Official Information requestsToday.

I refer you to the decision dated 21 July 2017 of the Human Rights Review Tribunal in [2017] NZHRRT 26 Reference No. HRRT 073/2015 issued with respect to the Privacy Act 1993 with remedy sought by Raymond Keith Williams as Plaintiff and the Accident Compensation Corporation as Defendant form which I quote the following;

"[26.3] ACC has a broad strategic focus on privacy. In 2013 it adopted a
comprehensive Privacy Strategy which has since been superseded by a Privacy
Maturity Plan, which formalises ACC’s approach to continue to improve ACC’s
privacy maturity between now and 2020. As noted at the outset of this Plan
“effective management of our customers’ information is an essential element in
creating a unique partnership with all New Zealanders”. ACC is committed to
building on and strengthening its approach to privacy.

[26.4] Both ACC’s privacy policy and the Privacy Maturity Plan are readily
available to all ACC staff members. These documents are supported by a set of
privacy policies specific to each of the twelve information privacy principles. "

**************************************************************************************************************
I will email Government Services today for your quick reference, a copy of this referred decision following me sending this Official Information Request.

Requests for Official Information;

Request 1:

(a) I welcome the provision to me through the www.fyi.org.nz, a complete copy of the comprehensive Privacy Strategy ACC adopted in 2013 as referred to in the Human Rights Review Tribunal ruling referred to above under [26.3].

(b) please confirm the exact 2013 date that ACC formally adopted their comprehensive Privacy Strategy.

Request 2:

I welcome the provision to me through the www.fyi.org.nz, a complete copy of the ACC privacy policy that was put into effect as a direct result of ACC's comprehensive Privacy Strategy being adopted by ACC in 2013, and any amendments and or iterations that were introduced by ACC that occurred prior to ACC superseding their comprehensive Privacy Strategy with ACC's Privacy Maturity Plan.

Request 3:

(a) I welcome the provision to me through the www.fyi.org.nz, a complete copy of the ACC Privacy Maturity Plan which as recorded based on information supplied to the Human Rights Review Tribunal by ACC's Privacy Representative, Ms Colman who is employed as a Privacy Officer, who at the time of the tribunal being conducted held the role with in ACC of Principal Advisor (Privacy Officer) in ACC’s Privacy Team:-

1. formalises ACC’s approach to continue to improve ACC’s privacy maturity between now and 2020, and

2. superseded the comprehensive Privacy Strategy adopted by ACC in 2013,

and any and all amendments and or iterations that were introduced by ACC that occurred following the introduction of ACC's Privacy Maturity Plan.

(b) please confirm the exact date that ACC formally adopted their ACC Privacy Maturity Plan.

I respectfully request that this information be made available to me in full under urgency within the next 15 working days, being by the end of business close on the 18th December 2017, with my reasons as follows;

i). The Human Rights Review Tribunal decision referred to has relevance to current matters that I have, and continue in my attempts to reasonably resolve with the Corporation involving matters of the use of inaccurate, out of date, incomplete, non relevant, and misleading information that the Corporation was asked to cease using in review submissions, prior to the commencement of a number of review proceedings.

ii). The information provided to me will allow me to put together in an informed manner my complaint to the Privacy Commission over the Corporation's breach of my rights, under Principal 8 of the Privacy Act, by having knowingly continued to rely on inaccurate, out of date, incomplete, non relevant, and misleading information provided to ACC by several treatment providers, without formally addressing the privacy policy remedies that I requested.

iii). within [26.4] of the NZHRRT's decision it states that

"Both ACC’s privacy policy and the Privacy Maturity Plan are readily
available to all ACC staff members. These documents are supported by a set of
privacy policies specific to each of the twelve information privacy principles. "

And therefore half of the information that I am currently seeking is readily available as accessible.

The other half of the information that I seek being the superseded information relating to ACC's prior comprehensive Privacy Strategy, and ACC's policy associated with the stated 2013 comprehensive Privacy strategy, should also be held within ACC's Privacy Office due to it's recency, in a manner that is both readily available, and therefore easily accessible for provision to myself.

I thank you for your time and assistance and respectfully request that under s16(2) of the Official Information Act, my preferred way of receiving a response is by email to the address from which ACC received the original request, not by post.

Yours faithfully,

David Lawson

Link to this

From: Government Services
Accident Compensation Corporation

Dear Mr Lawson

 

Official Information Act request

 

Thank you for your email of 17 November 2017 requesting the following
information under the Official Information Act 1982 (the Act):

 

Request 1:

 

(a) I welcome the provision to me through the [1]www.fyi.org.nz, a
complete copy of the comprehensive Privacy Strategy ACC adopted in 2013 as
referred to in the Human Rights Review Tribunal ruling referred to above
under [26.3].

 

(b) please confirm the exact 2013 date that ACC formally adopted their
comprehensive Privacy Strategy.

 

Request 2:

 

I welcome the provision to me through the [2]www.fyi.org.nz, a complete
copy of the ACC privacy policy that was put into effect as a direct result
of ACC's comprehensive Privacy Strategy being adopted by ACC in 2013, and
any amendments and or iterations that were introduced by ACC that occurred
prior to ACC superseding their comprehensive Privacy Strategy with ACC's
Privacy Maturity Plan.

 

Request 3:

 

(a) I welcome the provision to me through the [3]www.fyi.org.nz, a
complete copy of the ACC Privacy Maturity Plan which

 

1. formalises ACC’s approach to continue to improve ACC’s privacy maturity
between now and 2020, and

 

2. superseded the comprehensive Privacy Strategy adopted by ACC in 2013,

 

and any and all amendments and or iterations that were introduced by ACC
that occurred following the introduction of  ACC's Privacy Maturity Plan.

 

(b) please confirm the exact date that ACC formally adopted their ACC
Privacy Maturity Plan.

 

This email is to inform you that we are working on your request. We note
your request for an urgent reply within 15 working days. We will be in
touch with you as soon as possible, and certainly by 15 December 2017.

 

In the meantime, if you have any questions we will be happy to work with
you to resolve these. We can be contacted by email at
[email address].

 

Kind regards

Government Engagement and Support

 

 

Disclaimer:

"This message and any attachments may contain confidential and privileged
information. If you believe you have received this email in error, please
advise us immediately by return email or telephone and then delete this
email together with all attachments. If you are not the intended
recipient, you are not authorised to use or copy this message or any
attachments or disclose the contents to any other person."

References

Visible links
1. http://www.fyi.org.nz/
2. http://www.fyi.org.nz/
3. http://www.fyi.org.nz/

Link to this

From: Government Services
Accident Compensation Corporation


Attachment 0051012 Response and Appendix.pdf
665K Download View as HTML


Dear Mr Lawson

 

Please find attached our response to your request for information under
the Official Information Act 1982, dated 17 November 2017.

 

Yours sincerely

Government Engagement and Support

 

 

Disclaimer:

"This message and any attachments may contain confidential and privileged
information. If you believe you have received this email in error, please
advise us immediately by return email or telephone and then delete this
email together with all attachments. If you are not the intended
recipient, you are not authorised to use or copy this message or any
attachments or disclose the contents to any other person."

Link to this

Things to do with this request

Anyone:
Accident Compensation Corporation only: