Monday 19 December 2022Media release4 minutes to read
As originally published by Archives New Zealand on Monday 19 December 2022 https://www.archives.govt.nz/about-us/whats-new/chief-archivist-notifies-public-of-privacy-incident
This is a public apology and notification of a privacy incident that may have involved some of your personal information held by Archives New Zealand. This notice will explain what happened, how we have responded, and the support available to you if you are concerned your information has been affected by this incident.
How to access further information and support
We sincerely apologise for this incident, which was a result of human error. We want to reassure you that immediate corrective steps have been taken. We understand if you may feel anxious or worried about this breach of information. You can call or text 1737 any time of the day or night to talk to a counsellor – all calls are free and confidential. You can also reach out to your family doctor or healthcare provider.
If you suspect that you might have been affected by this incident, have any concerns about what has happened, or would like further information, you can contact Te Whatu Ora Health New Zealand at – firstname.lastname@example.org.
If you feel you have been harmed by this privacy breach, you are entitled to make a complaint to the Office of the Privacy Commissioner. You can do this at www.privacy.org.nz, by emailing email@example.com, or by calling 0800 803 909.
On Monday 19 September 2022 it was discovered that some digitised historical health records held by Archives NZ had been made ‘Open Access’ in error. These records were marked as ‘Restricted Access’ in the Collections Database but were unintentionally viewable by public users of ‘Rosetta’ the Archives NZ digital images System.
We have identified two instances of access to these records. The first instance was by a former Archives New Zealand staff member who discovered the records on 19 September 2022 and immediately alerted us to the situation. An unknown member of the public also accessed the records on two occasions in August 2022. While we have not been able to identify the second user who accessed the records, the access was for less than five minutes on each occasion.
What information was affected?
What have we done in response to this incident?
We have worked closely with the Office of the Privacy Commissioner, and Te Whatu Ora to investigate and resolve this incident. The steps we have taken include:
Page last updated: 14 February 2023
Is this page useful?