Privacy Commissioner consulted over Google Street View

Tue, 02 Dec 2008 11:21:51 +1300

The Privacy Commissioner has discussed Street View with Google. The discussion included an explanation of how Street View works and the steps Google is taking to address privacy concerns. The Commissioner is encouraged by Google’s proactive approach to protecting privacy, through face blurring and an image removal process.

If you are concerned about an image on Street View, you can request it be removed using the ‘Report a Concern’ function on the bottom right corner of the screen when looking at the Street View image.

Data matching encryption

Thu, 04 Dec 2008 12:15:18 +1300

Security gap being closed

9 September 2008

Enhanced security is now being required when New Zealand government agencies transfer data to other agencies for authorised information matching programmes Privacy Commissioner, Marie Shroff said today.

In February this year, the Office of the Privacy Commissioner reviewed how data was being transferred. Many files were not encrypted for transfer by tape, CD or floppy disk. The Commissioner required the adoption of encryption “within a reasonable time frame”. Six months on, she said that most departments have now achieved this.

Of the 46 authorised government data matching programmes operating in February, 19 transferred data in electronic form on digital media without encryption. Now, only three remain unencrypted.

“I have been advised that all files transferred on CD for authorised information matching programmes are now encrypted. One file transfer has been shifted to an on-line, encrypted transfer. However, Inland Revenue is involved in three transfers on tape which are not encrypted. The department advises that these three tapes require specialist computer equipment to read them and other security measures are also used to protect the data. Agencies involved in these tape transfers are still discussing options for enhancing security.”

Privacy Commissioner Marie Shroff initiated the review of data matching programme security after the major data breaches in the UK late last year involving tens of millions of records lost in transit between government departments. The data comprised the personal details of some 7 million British families.

"I am pleased that departments have made efforts to adopt more secure methods of data transfer. I look forward to further progress on all remaining programmes. Of course, transfers for the purposes of authorised information matching are merely one stream of intra-governmental data transfers. All agencies using and storing data about people – whether public or private sector – should carefully reflect upon the security of that data in each instance, for example by accepting the need for encryption for all portable data storage media,” said Ms Shroff.

The Privacy Commissioner‘s office has a special oversight role for government data matching programmes.

ENDS

For more information see www.privacy.org.nz or contact: Annabel Fordham tel 04 474 7590 or 021 509 735 or enquiries@privacy.org.nz

Background

For the previous media release see: http://www.privacy.org.nz/privacy-commissioner-requires-data-encryption/

For more information about the UK data breaches, see statements from the UK Information Commissioner: www.ico.gov.uk/upload/documents/pressreleases/2007/personal_details_lost_by_hmrc_201107003.pdf

Offshore ICT Guidance released by SSC

Tue, 14 Oct 2008 11:47:05 +1300

The State Services Commission has released draft guidance for government agencies looking at using offshore ICT providers. Government CIO, Laurence Millar says the guidance will assist agencies in taking a professional approach to considering offshore as an option to improve service delivery. SSC is looking for feedback on the guidance. It is in draft form at this stage and SSC welcomes any comment or feedback from agencies or suppliers on ways to improve it. Feedback is being taken through to 15th December 2008.

For more background information have a look at this link.

Privacy Awareness Week, 24-30 August 2008– “Privacy is Your Business"

Fri, 22 Aug 2008 12:16:48 +1200

22 August 2008

On Monday, Privacy Commissioner Marie Shroff will launch New Zealand’s Privacy Awareness Week 2008 (24-30 August) with the theme, “Privacy is Your Business”. Media are welcome to attend all events.

The week starts with a joint business breakfast with the Auckland Chamber of Commerce to announce the results of the latest UMR public opinion survey on privacy (Monday 25 August, from 7.30am, Rendezvous Hotel, Auckland; presentations from 8am).

This breakfast event will also see the launch of the Privacy Commissioner’s new book, “Privacy at work: a guide to the Privacy Act for employers and employees”. This handy A5 book (44 pages) looks at a number of common workplace situations and offers much-needed guidance on issues such as use of CCTV, reference checking and email monitoring.

On Tuesday 26 August, Listener columnist Jane Clifton will open the inaugural exhibition of Chris Slane’s privacy cartoons. This event, and the exhibition itself, will be at the Jimmy Café and Bar, Westpac St James Theatre, 77-87 Courtenay Place, Wellington. The exhibition will be open to the public from Wednesday 27 August – 8 September and entry is free. Media previews are available by appointment between 3 - 4pm on Tuesday 26 August.

A one-day Privacy Issues Forum will take place at the Intercontinental, Grey St, Wellington on Wednesday 27 August. The sessions include presentations on genetic research, the Law Commission’s review of privacy, DNA databases, social networking, and the role of the private investigator in criminal investigations. See www.privacy.org.nz for the full Forum programme. Media packs are also available, including details of the speakers and synopses of the presentations.

Privacy Awareness Week is an Asia-Pacific wide event. For more information about the week and activities across the region, see www.privacyawarenessweek.org/paw

For more information see www.privacy.org.nz or contact:

Annabel Fordham tel 04 474 7590 or 021 509 735 or enquiries@privacy.org.nz

UMR survey results media release

Fri, 22 Aug 2008 14:53:10 +1200

24 August 2008

New Zealanders concerned about privacy breaches by business and on the internet, survey shows

New Zealanders are concerned about the safety of their personal information, especially in the business arena and on the internet, according to new research released today.

“The results show that many New Zealanders have a strong and growing awareness of privacy and information technology issues. A third of people surveyed (32%) reported that they had become more concerned about issues of individual privacy and personal information in the last few years,” Privacy Commissioner Marie Shroff said.

The UMR Research survey again showed very high levels of concern about potential breaches of individual privacy by business. Ninety percent of people said they were concerned (including 74% very concerned) if a business they didn’t know got hold of their personal information. Eighty-six percent were concerned if information supplied to a business for one purpose was used for another purpose.

A new question showed that New Zealanders are not necessarily comfortable with the globalisation of personal information. Eighty-one percent (81%) of respondents were concerned with their personal information being held by overseas businesses and, out of that number, 61% were very concerned.

Levels of trust in the way different organisations protect or use personal information varied widely. Health service providers, including doctors, hospitals and pharmacies rated highly, with 92% of New Zealanders saying they were trustworthy. The level of trust in Police handling of personal information was also high (84%).

Approximately two-thirds of respondents said they trusted the way government departments (65%) and ACC (69%) handled personal information. Credit rating agencies were considered trustworthy by 42% of respondents. Businesses selling over the internet recorded the lowest levels of trust (25%) for their personal information handling.

Two-thirds of respondents (67%) said they were uncomfortable that internet search engines and social networking sites tracked internet use in order to deliver targeted advertising.

Half of New Zealanders (50%) were unaware that everyone in New Zealand has their own national health index number which identifies them in the health system. Knowledge of the existence of the NHI was highest (71%) among those respondents classified as ‘homemakers’. In the different regions, knowledge of the NHI was lower in rural areas (46%) but was lowest in Christchurch, with only 38% of those surveyed reporting awareness of the NHI.

Concern about insurance companies being able to make decisions using genetic information was generally high, with 74% of respondents being either concerned or very concerned.

Concern about privacy was greatest in the areas of safety of children on the internet (87%), and security of personal information on the internet (82%). Like the 2006 survey, the 2008 results show that video surveillance in public places provoked the lowest level of concern (27%).

“An interesting result is that concern about government departments sharing personal information rose from 37% to 62% between the 2006 and 2008 surveys. Perhaps this was partly due to making the question clearer – but it shows that business is not alone in needing to embrace privacy as an issue” said Ms Shroff.

“We are in the middle of an information revolution. Technology enables details about individuals to be collected, used and disclosed on an unprecedented scale, both in New Zealand and overseas. These survey results give some clear messages to both business and government about protecting information in order to retain customer trust.

We plan to continue regular surveys in order to take the “privacy temperature” of New Zealanders” said Ms Shroff. The previous UMR privacy survey was run in March 2006.

Ms Shroff announced the results at a co-hosted business breakfast with the Auckland Chamber of Commerce.

Full survey results (including earlier surveys) are available at www.privacy.org.nz

For more information see www.privacy.org.nz or contact:

Katrine Evans or Annabel Fordham tel 04 474 7590 or 021 509 735 or enquiries@privacy.org.nz

New guide gives practical help on workplace privacy issues

Fri, 22 Aug 2008 12:38:18 +1200

24 August 2008

Employers and employees facing difficult and potentially contentious workplace privacy issues can find useful guidance in a new book launched today by Privacy Commissioner Marie Shroff.

The release of Privacy at work: a guide to the Privacy Act for employers and employees marks the beginning of Privacy Awareness Week (24-30 August).

“The book offers much needed guidance about applying the Privacy Act in the workplace”, said Ms Shroff. “Privacy issues at work affect most of us, one way or another, and it is an area that generates a great range of questions.

“For example employees may be concerned that CCTV cameras have been installed at work, or that they have been asked to undergo workplace drug testing. Employers may be unsure about whom they can contact as a referee when processing a job application, or may want to know how long they can keep personal information.”

The book gives tips on use of technology in the workplace, such as monitoring staff email and internet use, or GPS tracking and finger-scanning. It also offers guidance about handling personal information on databases – including unauthorised employee “browsing” of client records.

The book is A5 (44 pages; colour). It is $20 (plus p&p) and is available through the Office of the Privacy Commissioner, 09-302 8680 (ph) or 09-302 2305 (fax), PO Box 466 Shortland St, Auckland, or by email: enquiries@privacy.org.nz.

For more information see www.privacy.org.nz or contact:

Katrine Evans tel 04 474 7590 or 021 509 735 or enquiries@privacy.org.nz

Disclosure of Trade Me members' details to defendants

Mon, 18 Aug 2008 09:11:43 +1200

The recent disclosure of Trade Me members' personal information to criminal defendants has caused a great deal of concern. It is not currently clear how or why this particular information came to be in the defendants' hands. The Privacy Commissioner is making enquiries with Trade Me, the Police and the Crown lawyers to find out what happened.

If you have any particular concerns or would like further information, please contact us on enquiries@privacy.org.nz, or 0800 803 909.

Post-Compulsory Education Unique Identifier Code

Wed, 14 May 2008 09:40:55 +1200

Submissions on the proposal to revoke the 2001 Code are now closed.

The Privacy Commissioner believes the Code has been superseded by Part 30 of the Education Act 1989. The Commissioner is consulting on the proposed revocation.

Click the link to the consultation discussion document, or email code@privacy.org.nz, or call 0800 803 909.

10 July 2008

UMR 2006 survey media release

Wed, 12 Jul 2006 13:05:45 +1200

Public Opinion Survey shows deep concern about privacy.

Potential invasion of privacy, particularly by businesses, is a very serious concern for many New Zealanders, a public opinion survey commissioned by Privacy Commissioner Marie Shroff shows.

The UMR Research telephone survey of 750 New Zealanders found that, in relation to the handling of information by businesses, 93 percent of people thought respect for and protection of personal information was important.

Fifty-six percent of people surveyed said they were concerned about individual privacy generally. This is up from 47 percent concerned in a similar survey five years ago.

“It is easy to take privacy for granted in a democratic country that has been relatively free of the serious human rights abuses experienced elsewhere,” Mrs Shroff says.

“Modern technology offers many benefits to business and consumers. But we should recognise that people do have significant concerns about threats to privacy.”

“We need to be vigilant to make sure human rights continue to be protected and that technological advances are matched by privacy protections.”

The UMR survey shows that individual privacy rates sixth on the level of public concern out of nine major issues tested, compared with seventh place in a similar survey five years ago.

As in the 2001 survey, education, crime and violence, and health were the major concerns. Concern about unemployment slipped, and ranked lower than privacy. The only issue in the latest survey to show a larger increase in the level of concern than privacy was “the environment generally”.

Blue collar occupational groups had higher levels of concern about individual privacy than did white collar groups. Concern was also higher amongst Maori.

The areas generating the highest level of privacy concerns were: security of personal details on the internet (84% concerned), confidentiality of medical records (78% concerned), and the potential for government interception of phone calls or emails (72% concerned).

Asked about the handling of information by businesses, respondents had high levels of concern about potential breaches of privacy. For example, 89 percent of people said they would be concerned (73 percent very concerned) if a business they supplied personal information to for a specific purpose used it for another purpose.

There were also high levels of concern about businesses getting hold of personal information they had not been given directly, asking for personal information that didn’t seem relevant; and surreptitiously monitoring activities on the internet to record information on sites visited.

Mrs Shroff says “I am keen to raise the awareness of business in New Zealand about the benefits, for both business and consumers, of good handling of personal information. These survey results strongly support that.”

The UMR survey found 72 percent of people thought a Privacy Commissioner was needed. Support for a Privacy Commissioner was highest among young people under 30 (85% thought a Privacy Commissioner was needed).

See the survey results: www.privacy.org.nz

ENDS

For more information please contact Annabel Fordham, Senior Legal and Communications Adviser or Katrine Evans, Assistant Privacy Commissioner, 04 474 7590 or 021 509 735.

Privacy Commissioner requires data encryption

Mon, 25 Feb 2008 16:08:53 +1300

Download the Privacy Commissioner's media release of 21 February 2008.