Dear University of Otago,

These following questions are with regard to the recent "digital security issue" where students data was accessed during the period of 23 August and 5 October 2022.

When you say that students have confirmed that they have deleted the students personal information, has the University confirmed this or have they taken the students at their word? If they have taken the students at their word, why?

As students mobile numbers and addresses have been leaked and the students that viewed/downloaded this data have “signed a Non-Disclosure agreement to this effect”, are these students aware that they have signed a Non-Disclosure agreement?

If there are direct repercussions for the students whose personal data was leaked as a result of the data leak, what support and reparations is the University willing to provide?

Is the University willing to provide reparations to students whose personal information (mobile numbers, addresses, police vets etc) was leaked?

Does the University recognise the sensitivity of the personal information leaked and the repercussions that may occur for students, particularly female students?

Yours faithfully,

On Your Behalf