d when, that Police were investigating and the privacy authority had been notified. It also suggested that affected customers monitor their credit card accounts and contact their financial institution if they had any concerns.
Insights from agencies
“Carry out regular audits on your agency’s IT security. Employ an IT security company to conduct penetration tests on your system to look for security flaws. Fix any weaknesses that are identified.”
“Have a notice counting the days since the last data breach and celebrate as an agency when the time elapsed breaks a previous record.”
Finding other people’s information
People sometimes have information sent to them that's not theirs, or they may find other people's information in places like cafes or on public transport. If this happens to you, you should treat the information like the valuable lost property it is. You have legal obligations once you are in possession of information that identifies other people, or that is clearly confidential.
Privacy breach guidelines
The Office of the Privacy Commissioner’s voluntary privacy breach guidelines provide the key steps for agencies to respond to privacy breaches.
How to contact the Office of the Privacy Commissioner
Write to us:
PO Box 10-094
The Terrace, Wellington 6143.
Fax: (04) 474 7595
Enquiries Line (for general enquiries):
0800 803 909 (from 8.30am to 5pm, Monday to Friday)
04-474 7590 (Wellington)
09-302 8680 (Auckland)
Media Enquiries (for media use only):
021 509 735
View the pdf of the Data Safety Toolkit.