8 Feb 2024 Data Privacy Incident (Meta Support) - email details

H Patel made this Official Information request to Inland Revenue Department

The request was partially successful.

From: H Patel

Dear Inland Revenue Department,

In the 'Review and analysis of Social Media for Custom Audiences' document (https://www.ird.govt.nz/-/media/project/...) you have noted that a cleartext CSV was sent to Meta Support via email.

Could you please advise:
- What, if any, end-to-end encryption method was used (e.g. S/MIME, PGP) when transmitting the file?
- What is IRD's policy on appropriate methods to secure personal information when transmitting to third parties (both via email and other means)?
- Can IRD be sure that there have been no other occasions of personal information being shared with third parties, in a non-approved manner, other than the incidents described in the review document or otherwise previously disclosed? Why/why not?

Yours faithfully,

H Patel

Link to this

From: oia
Inland Revenue Department

[IN CONFIDENCE RELEASE EXTERNAL]

[IN CONFIDENCE RELEASE EXTERNAL]

Kia ora

 

Thank you for your request under the Official Information Act.  

 

We will respond within the 20-day statutory timeframe.  You can expect to
receive a response no later than 04 December 2024.

 

Your reference number is 25OIA1568.   

 

Kind regards  
Governance and Ministerial Services | Inland Revenue - Te Tari Taake

 

 

 

From: H Patel <[FOI #29088 email]>
Sent: Wednesday, 6 November 2024 5:11 pm
To: oia <[IRD request email]>
Subject: 25OIA1568 Request Patel

 

External Email CAUTION: Please take CARE when opening any links or
attachments.

 

 

 

 

 

 

 

Dear Inland Revenue Department,

 

In the 'Review and analysis of Social Media for Custom Audiences' document
([1]https://aus01.safelinks.protection.outlo...)
you have noted that a cleartext CSV was sent to Meta Support via email.

 

Could you please advise:

- What, if any, end-to-end encryption method was used (e.g. S/MIME, PGP)
when transmitting the file?

- What is IRD's policy on appropriate methods to secure personal
information when transmitting to third parties (both via email and other
means)?

- Can IRD be sure that there have been no other occasions of personal
information being shared with third parties, in a non-approved manner,
other than the incidents described in the review document or otherwise
previously disclosed? Why/why not?

 

Yours faithfully,

 

H Patel

 

-------------------------------------------------------------------

 

This is an Official Information request made via the FYI website.

 

Please use this email address for all replies to this request:

[2][FOI #29088 email]

 

Is [3][IRD request email] the wrong address for Official Information requests
to Inland Revenue Department? If so, please contact us using this form:

[4]https://aus01.safelinks.protection.outlo...

 

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:

[5]https://aus01.safelinks.protection.outlo...

 

If you find this service useful as an Official Information officer, please
ask your web manager to link to us from your organisation's OIA or LGOIMA
page.

 

 

show quoted sections

Link to this

From: oia
Inland Revenue Department


Attachment image001.png
8K Download

Attachment 25OIA1568 Signed response Patel.pdf
146K Download View as HTML


[IN CONFIDENCE RELEASE EXTERNAL]

[IN CONFIDENCE RELEASE EXTERNAL]

Kia ora H Patel

Please see attached Inland Revenue’s response to your request made under
the Official Information Act 1982 (OIA), received on 6 November 2024.

Kind regards

Governance and Ministerial Services | Inland Revenue - Te Tari Taake

 

This email and any attachment may contain confidential information. If you
have received this email or any attachment in error, please delete the
email / attachment, and notify the sender. Please do not copy, disclose or
use the email, any attachment, or any information contained in them.
Consider the environment before deciding to print: avoid printing if you
can, or consider printing double-sided. Visit us online at ird.govt.nz

Link to this

Things to do with this request

Anyone:
Inland Revenue Department only: