Sharing of information using secure methods
Anon made this Official Information request to Accident Compensation Corporation
The request was partially successful.
From: Anon
Dear Accident Compensation Corporation,
According to your responses in GOV-027851, ACC stores information in SharePoint. In response reference GOV-015965, you stated: "ACC has sought to centralise our records, and have started to use SharePoint, Microsoft Teams, and Te Pātaka (our internal intranet)."
Please provide me with the policies, processes, rules, guidelines and all other documents pertaining to sharing information using Microsoft SharePoint, Microsoft Teams and Te Pātaka. Please provide me with a list of methods and software used by ACC for sharing personal information in electronic form, such as review files and health records, with the Courts, reviewers, external legal council, claimants and third parties, that is certified by the Department of Internal Affairs (or some governing body) as being a safe method for sharing the information electronically which is mitigates against and secure against the risk of unauthorised access or interception (as in the case of emails).
Thanks,
An
From: Government Services
Accident Compensation Corporation
Kia ora
Thank you for contacting ACC; this is an automatic reply to confirm we
have received your email.
We will try to respond your query as quickly as possible. However,
depending on the nature of your request you may not receive a response for
up to 20 working days. You can check the [1]Ombudsman OIA response
calculator to find when your request for official information will be due
In cases where ACC’s response provides information that is identified to
be of general public interest, the response may also be published on the
ACC’s website. If ACC publishes the response to your OIA request, all
personal information, including your name and contact details, will be
removed.
The information you have requested may involve documents which contains
the names of our staff. Please let us know whether you require these
names. We may need to consult our staff before deciding whether we can
release this information, and this may take a bit more time. If we do not
hear from you, we will assume that you do not require staff names.
Our [2]website provides up to date news and information about our work.
You can also follow us on [3]Facebook and [4]Twitter. Further information
about how to contact us is also available [5]here.
Ngâ mihi,
Government Engagement Team
Government Engagement, ACC
' 0800 101 996
* Box 242, Wellington 6011
[6]www.acc.co.nz
Disclaimer:
"This message and any attachments may contain confidential and privileged
information. If you believe you have received this email in error, please
advise us immediately by return email or telephone and then delete this
email together with all attachments. If you are not the intended
recipient, you are not authorised to use or copy this message or any
attachments or disclose the contents to any other person."
References
Visible links
1. http://www.ombudsman.parliament.nz/agenc...
2. http://www.acc.co.nz/
3. http://www.facebook.com/ACCNewZealand/
4. https://twitter.com/accnz
5. http://www.acc.co.nz/contact/
6. https://aus01.safelinks.protection.outlo...
From: Government Services
Accident Compensation Corporation
Kia ora Anon
ACC shares personal information using Email, and by post on a password
protected CD or USB.
You can find the Disclosing information policy on our website
at [1]www.acc.co.nz/home/search?Search=Disclosing+information&submit.x=0&submit.y=0.
If you are not happy with this response, you have the right to make a
complaint to the Ombudsman. Information about how to do this is available
at [2]www.ombudsman.parliament.nz or by phoning 0800 802 602.
Ngâ mihi
Sara Freitag (she/her)
Manager | OIA Services
' 027 973 7330
* PO Box 242, Wellington 6011
ACC cares about the environment – please don’t print this email unless it
is really necessary. Thank you.
show quoted sections
From: Anon
Dear Government Services,
Please provide me with all documentation that shows that ACC's use of sending private health records via email meets the standards set by the Government Cheif Privacy Officer and the Government Chief Information Privacy Officer (Department of Internal Affairs).
The Office of the Privacy Commissioner repeatedly states that email is not secure from interception or unauthorised access, and thus fails to meet the requirements set out in s 22, IPP 5, of the Privacy Act 2020, or the Health Information Privacy Code 2020, rule 5.
I have noticed that ACC does not even take the step to ensure that health records are password protected when sending electronically to third parties.
Again, I ask for a list of methods that meet the standards set by the government, and which ACC is legally obliged to comply with under the Privacy Act and the HIPC.
Yours sincerely,
Anon
From: Government Services
Accident Compensation Corporation
Kia ora
Thank you for contacting ACC; this is an automatic reply to confirm we
have received your email.
We will try to respond your query as quickly as possible. However,
depending on the nature of your request you may not receive a response for
up to 20 working days. Please note that the period from 25 December 2023
to 15 January 2024 (inclusive) are not counted as working days under the
Official Information Act 1982, and our offices will be closed from 25
December to 7 January. OIA requests submitted after 27 November 2023 may
take a bit longer than you expected. You can check the [1]Ombudsman OIA
response calculator to find when your request for official information
will be due.
In cases where ACC’s response provides information that is identified to
be of general public interest, the response may also be published on the
ACC’s website. If ACC publishes the response to your OIA request, all
personal information, including your name and contact details, will be
removed.
The information you have requested may involve documents which contains
the names of our staff. Please let us know whether you require these
names. We may need to consult our staff before deciding whether we can
release this information, and this may take a bit more time. If we do not
hear from you, we will assume that you do not require staff names.
Our [2]website provides up to date news and information about our work.
You can also follow us on [3]Facebook and [4]Twitter. Further information
about how to contact us is also available [5]here.
Ngâ mihi,
Government Engagement, ACC
' 0800 101 996
* Box 242, Wellington 6011
[6]www.acc.co.nz
Disclaimer:
"This message and any attachments may contain confidential and privileged
information. If you believe you have received this email in error, please
advise us immediately by return email or telephone and then delete this
email together with all attachments. If you are not the intended
recipient, you are not authorised to use or copy this message or any
attachments or disclose the contents to any other person."
References
Visible links
1. http://www.ombudsman.parliament.nz/agenc...
2. http://www.acc.co.nz/
3. http://www.facebook.com/ACCNewZealand/
4. https://twitter.com/accnz
5. http://www.acc.co.nz/contact/
6. https://aus01.safelinks.protection.outlo...
From: Government Services
Accident Compensation Corporation
GOV 030178 Emailing from Eos using a Template.pdf
976K
Download
View as HTML
GOV 030178 Inbound and Outbound Document Checks.pdf
933K
Download
View as HTML
GOV 030178 Response.pdf
199K
Download
View as HTML
Kia ora Anon
Please find attached our response to your official information request
dated 25 January 2024. If you have any questions about the response you
can contact us at this [1]address, for all other matters please use our
contact form at: [2]https://www.acc.co.nz/contact/ alternatively give us a
call on 0800 101 996.
If you are having trouble viewing the PDF, please ensure you have the
latest version of Adobe Acrobat Reader. To download this freeware please
click [3]here.
Ngâ mihi
Christopher Johnston (he/him)
Manager | OIA Services
* PO Box 242, Wellington 6011
ACC cares about the environment – please don’t print this email unless it
is really necessary. Thank you.
Disclaimer:
"This message and any attachments may contain confidential and privileged
information. If you believe you have received this email in error, please
advise us immediately by return email or telephone and then delete this
email together with all attachments. If you are not the intended
recipient, you are not authorised to use or copy this message or any
attachments or disclose the contents to any other person."
References
Visible links
1. mailto:[email address]
2. https://www.acc.co.nz/contact/
3. https://get.adobe.com/nz/reader/
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence
Offensive? Unsuitable?
Requests for personal information and vexatious requests are not considered valid requests for Official Information (read more).
If you believe this request is not suitable, you can report it for attention by the site administrators
Report this request