Office of the Privacy Commissioner

Breach Case 7: Rubbishing privacy Neil Sanson
5 April 2018 at 16:54

A recent data breach incident provided an example of how your responsibility to protect personal information does not end when you put the rubbish out for collection.

health, data, breach

UK supermarket chain ‘vicariously liable’ for data leak Angus Jamieson
2 February 2018 at 10:23

UPDATE:

International, data, breach, IPP5 - storage & security

Breach Case 6: Reusing and recycling Neil Sanson
29 November 2017 at 16:24

A recent data breach incident gave us an example of how trying to be careful in one respect can lead to unintended bad consequences in other ways.

email, data, breach

Breach Case 5: Taking client files offsite Neil Sanson
4 August 2017 at 15:04

You keep your home safe, don’t you? So there should be no problem taking some work notes home, rather than travel the extra distance to drop them off at the office at the end of the day; or to have to pick them up in the morning at the office. You are saving time and avoiding unnecessary travel. But homes do get burgled, thousands in any month.

data, breach

If you spot a security flaw, tell CERT NZ Neil Sanson
4 August 2017 at 11:36

Computer systems always seem to have problems and vulnerabilities. Some data breaches occur because of those vulnerabilities. If you spot a vulnerability or security flaw in a website, you can first report it to the organisation. They are generally happy to hear about a problem, so they can fix it.

data, breach

When governments get data protection wrong Charles Mabbett
2 August 2017 at 13:01

“I’m from the government and I’m here to help.” The former US President Ronald Reagan famously said these were the “nine most terrible words in the English language” that anyone could expect to hear.

International, data, breach

Breach Case 4: Testing with real data Neil Sanson
9 June 2017 at 13:03

Sometimes it seems a good idea to use real production data in a test environment. But doing so means security becomes even more important if you want to stop things going wrong.

security, data, breach