'High and ongoing' risk of more Oranga Tamariki privacy breaches
Privacy Commissioner Michael Webster says doesn't have "robust systems" in place to protect the personal information it holds.
Photo:
VNP / Phil Smith
Privacy Commissioner Michael Webster says the children's ministry remains at "high and ongoing risk" of disclosing vulnerable children's highly sensitive information.
He has issued Oranga Tamariki a compliance notice to compel it to do more to fix its deficient training, data sharing and privacy systems.
"Oranga Tamariki currently doesn't have sufficiently robust systems and practices in place to appropriately protect the personal information it holds," he said.
In breaches documented in an investigation report kept under wraps for a year, and only revealed by RNZ in March, several women and whānau suffered actual physical harm including from being attacked, after Oranga Tamariki disclosed information it should not have.
It had let slip addresses and names, for instance.
A series of serious breaches have been notified to the commissioner since 2020 (prior to 2019, OT and other public agencies were not mandated to alert him).
"These incidents have put vulnerable children, parents and caregivers at risk as well as retraumatised victims," Webster said in the [https://www.privacy.org.nz/assets/New-order/News/20250527-Compliance-Notice-Oranga-Tamariki-CN-01_2025a-A1082324.pdf
compliance notice] issued on Monday and announced on Wednesday.
"I consider there is a high and ongoing risk that without taking steps to mitigate the risk, serious privacy breach incidents will continue to occur."
The compliance notice said OT had improved under a fixit plan that did not go far enough, ordering the ministry to take further measures by October, and some by March 2026.
Webster listed ongoing weaknesses around personal information he had identified, including documents and devices being lost, or disposed of loosely, and inadequate access controls.
Staff persisted in having access to personal information they should not have, over a year after an investigation report had warned OT it must clamp down on access.
At that time, even trainees were being allowed into files which they shouldn't have been allowed to access. The investigation report was
released to RNZ in March 2025
after months of asking for it.
Not only did the April 2024 investigation state the scale of breaches was impossible to know as OT did not keep proper records of them, but the compliance notice is now once again ordering the ministry to set up a proper privacy breach reporting framework.
The other measures the ministry must undertake by October entail not just strengthening its own systems, but externally, too, with the commissioner ordering stronger contracts with NGO service providers around keeping information secure and disposing of it.
The ministry must begin to audit how it was going, the compliance notice said.
Earlier this month, RNZ reported how the ministry had yet to make a start on half a dozen of the recommendations in the privacy breach April 2024 report, while a dozen others were underway but not complete. Among those not started was
the setting up of an induction process
so new staff were less likely to breach clients' privacy.
In June 2024, RNZ reported that
dozens of analysts at the ministry had access to personal details about at-risk children
they should not have.
A key weakness is technology: The ministry's core information IT systems, including its social worker records about thousands of children, are old and weak, but it has continued to struggle to find the resources, expertise and time to replace them.
Webster said the new compliance notice was necessary to "underpin" the improvements OT was making.
The ministry said on Wednesday it continued to work closely with the Office of the Privacy Commissioner on improving how it looked after information.
It elevated the chief privacy officer role higher up among management, and instituted an improvement plan that would be completed in 2026.
"The Privacy Commissioner was involved in the development of that plan. We continue to make good progress on implementing the plan, with several actions already completed or significantly progressed prior to receiving the notice," Acting chief privacy officer Jane Fletcher said in a statement.
It had not had any notifiable privacy breaches in the past 18 months, she added.
A tech upgrade called the Frontline Technology Systems Upgrade would "deliver greater safety, security and privacy".
The ministry said Fletcher was acting in the role while Philip Grady was on secondment at Health New Zealand. The chief privacy officer job was elevated from a tier five to a tier two management role eight months ago as a result of the breaches investigation.
Sign up for Ngā Pitopito Kōrero
,
a daily newsletter curated by our editors and delivered straight to your inbox every weekday.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
RNZ News
3 hours ago
- RNZ News
Backyard battles take fighting off street, participant says
Hamilton man Cameron Harcourt (left), with an opponent at the King of the Street event on 24 May. Photo: Supplied A participant in a controversial street fighting competition is defending it, saying amateur tournaments remove violence from the streets. An unregulated tournament promoted by New Zealand mixed martial arts fighter Dan Hooker was held in a suburban Auckland backyard on Saturday 24 May , with 32 combatants competing for a $50,000 prize. Hooker said the only major injury was to a fighter's arm and signalled plans to host further events , despite criticism. New Zealand Boxing Coaches Association president Billy Meehan described the event as "thuggery, not sport", but Hamilton fighter Cameron Harcourt, who travelled up for the event, said the backlash was unfair. "We're going to fight anyway," he said. "There's fights on the streets. "The same way Streetbeefs in America started to get the fights off the streets. If you had beef, you apply for this and you jump in, and it gives us a place to do it in a controlled environment. "The thuggery is taken out and we've turned it into a sport." Streetbeefs is an unregulated American backyard fighting club and You Tube channel, hosting different combat codes. The founders said it was established as a response to more "dangerous forms of street and gun violence". Cameron Harcourt (right) says the Auckland backyard fighting event took violence off the street and put it in a controlled environment. Photo: Supplied Police are investigating one fighter from the Saturday event, who was seen wearing an electronic monitoring bracelet in social media footage of his fight. Harcourt said he wanted to prove that the fights were a fair playing field, and not all about "tattoos and gang affiliations". "Nothing changes what someone is - we're all humans. Doesn't matter about your colour, your size, your age, your background, we're all people and we all bleed. "I think it is a good sport and I love fighting for that." Up to nine different gangs were reportedly represented at the tournament. Fighters had to sign a waiver before taking part, stipulating that involvement was at their discretion. He said, unlike team sports like rugby, he enjoyed how he was the only person accountable, if the fight did not go his way. "You're stuck in a ring with contact and you just feel alive, and it's just sick," he said. "It's also art. "You can create your combos and perform them. It's just a wicked sport." Although billed as an amateur event, it is understood a professional fighter won the tournament. Harcourt hoped to contest a planned tournament in Christchurch later this year. The Accident Compensation Corporation (ACC) suggests participants of amateur street fighting events will be covered under the scheme, as it did not require details of how injuries occur. An agency spokesperson said the scheme operated on a no-fault basis. "All New Zealanders pay levies in different ways. The money we collect goes into one of our five accounts. "We use each account to cover specific types of injuries. For example, if someone is injured playing sports, the money used to support their recovery is dependent on their individual circumstances." Last year, the cost of active ACC claims for sport and recreation injuries exceeded $1 billion, while accidental injuries in the home and community, which covered injuries from assaults and also concussion, cost more than $2.3 billion. Sign up for Ngā Pitopito Kōrero, a daily newsletter curated by our editors and delivered straight to your inbox every weekday.
RNZ News
4 hours ago
- RNZ News
Christchurch fraudster Diane Baumann used stranger's driver's licence to claim $30,000 in payments
By Al Williams , Open Justice reporter Diane Baumann used the driver's licence details of a stranger in a different city to create a fictious carer and receive payments while collecting ACC benefits. Photo: RNZ / Kate Newton A mother of five used a stranger's driver's licence details to create a fictitious carer for herself so she could get nearly $30,000 in payments, while also collecting Accident Compensation Corporation benefits. Diane Marie Baumann's deception only started to catch up with her when the real owner of the driver's licence, who lived in a different city, received correspondence from Inland Revenue. Soon after, the woman also discovered she had a poor credit rating score because of the multiple debts Baumann had run up in her name. Now Baumann, 39, also known as Diane Cox, has appeared for sentencing in the Christchurch District Court on multiple charges of using documents for pecuniary advantage. Between November 2020 and April 2021, Baumann received an Accident Compensation Corporation (ACC) benefit while receiving regular payments from Custom Care Nursing Limited. She used her Rolleston address and her sibling's phone number as part of her client details. Baumann used another phone number as the contact for the fictitious carer she had created for herself, using the victim's driver's licence details. Over the next several months, Custom Care Nursing Limited deposited $26,957 into a bank account number allocated to Baumann under her alias, Diane Cox. At the same time, Baumann opened accounts with Spark New Zealand, One New Zealand and Zip Co, using the victim's driver's licence details. She received $3680 in services and products, which were never repaid. The deception continued when she spoke to police and Oranga Tamariki on multiple occasions in 2024 with concerns about a family member she said was in a relationship with an older teen, known as Male A. Baumann completed an unsupported child's benefit application form for Male A, requesting that benefit payments be made to an account named D. Cox. On the application, she said Male A had come into her care and that she was "fully supporting" him and denied having had any contact with a social worker from Oranga Tamariki or other authorised agencies. She then texted Male A's mother, saying she needed to meet her to get his medication. His mother replied, telling Baumann she would be getting the cops at her door and that it was not funny that she had not informed her that Male A was at her residence. Again, she completed an unsupported child's benefit interview form, recording that the arrangement for Male A to live with her had become permanent. The pair then attended a face-to-face interview with an assessor from Barnardos regarding the application, with Baumann claiming Male A would be staying in her spare bedroom, which had just been left vacant by her son. She said she had tried to get Male A's birth certificate and clothing from his mother but was unsuccessful. Baumann's son had not been living with her prior to the interview. At the end of the 2021 financial year, the woman who owned the driver's licence received correspondence from Inland Revenue regarding her employment at Customer Care Nursing Limited. She had never worked for them. In 2022, the victim's bank manager printed off her credit score, which showed debts accumulated in her name that she was not responsible for. The woman then conducted her own investigation using three debt collection agencies. Through them, she discovered that the addresses and phone numbers used in the accounts under her name were unknown to her. It turned out Baumann had managed to set up employee contracts, opt out of KiwiSaver and fill in tax code documents, all signed in the victim's name. She also used an email address with the victim's name which had no association to the victim. It remains unclear how Baumann got the woman's driver's licence and personal details as she declined to comment on any of the offending. She also refused to provide the Pin number to her cellphone. Judge Gerard Lynch said Baumann's offending had caused significant financial implications for the victim. "She was upset to find out she had a bad credit rating," Lynch said. "The victim says, 'I wish she would put this amount of effort into getting a real job'." The judge said Baumann had two previous convictions for theft and deception in 2017. She had used methamphetamine as a daily coping mechanism with regards to access to her children and there had been relationship issues. Judge Lynch said there was an ongoing need for rehabilitation and that he would impose home detention to promote her rehabilitation. "Given the personal background and drug misuse, I will adopt rehabilitation over a punitive approach. "When we deal with government departments, we can't expect them to drill down and check every application, if they did, things would ... grind to a stop." Judge Lynch said there were remorse, addiction and personal factors. "The reality here is there was no defence to these charges. "Nothing is going to be gained by sending you to prison, you are on notice now, if you offend again, you won't be bailed." The judge said there was no realistic prospect of reparation and partial reparation had been offered. He ordered that $7500 reparation be paid and sentenced Baumann to six months' home detention. Sign up for Ngā Pitopito Kōrero , a daily newsletter curated by our editors and delivered straight to your inbox every weekday.
RNZ News
4 hours ago
- RNZ News
'I've had a wonderful life': 90 years of Jim Bolger
Jim Bolger in December 2016. Photo: RNZ Jim Bolger, who was the prime minister between 1990 and 1997, turned 90 on Saturday. He reflected on the last nine decades of his life on Sunday Morning - after having celebrated with a "big gathering" of family, friends, and neighbours. On his political career, Bolger said the biggest issue was to get Pākehā to "face up to the reality that we owed Māori". "We took big steps in the economy, and got the economy going, and all the rest, but the country and society is more than the economy," he said. "Māori ... had been badly, badly treated by the early settlers, we owed Māori redress and change. "I put that higher than managing the books, as it were, with the help of others, and of course you're always helped by others, but the Treaty principles and recognition that the early European settlers did not treat Māori fairly, I think was hugely important." Bolger said he did not understand those, such as David Seymour - who had also been sworn in as deputy prime minister on Saturday - who "want to diminish the role of Māori in New Zealand". "They were here first, they were here very much before everybody else, and they have been part of our history from that time on." He said the current prime minister, Christopher Luxon, needed to tell Seymour "to shut up with his anti-Māori rhetoric" - and to thank Winston Peters for what he's doing in foreign affairs - "because I think he's doing that job well". "Winston's a very interesting political figure, there's no question about it. He's certainly left his mark on politics in New Zealand." Bolger said his Irish ancestry helped him engage emotionally and attitudinally with Māori. "I sort of instinctively knew what it was like to be treated as second-class citizens, and Māori were treated as second-class citizens. And some people still want to do that." Bolger grew up in coastal Taranaki, and said he was not taught "a single word" about the invasion of a pacifist settlement at Parihaka, but was taught about War of the Roses in England. Parihaka Pa, circa 1900, with Mount Taranaki - taken by an unidentified photographer. Photo: Union Steam Ship Company of New Zealand / Ref 1/2-056542-F, Alexander Turnbull Library, Reflecting on his life outside of his political career, he could not say what he was most proud of - "I think it'd be foolish to try and select one over another." He began as a farmer - from helping his neighbour to milk cows at nine, to leaving Ōpunake High School at 15 to work on the family dairy farm, and owning his own near Rahotu at 27. He got married and moved to a sheep and beef farm in Te Kūiti two years later. Bolger then joined the National Party and was an MP, the leader of the opposition, and then the prime minister after National won the 1990 general election. He later became New Zealand's Ambassador to the United States, was elected Chancellor of the University of Waikato, and has been the chairman of a number of state-owned enterprises and other organisations. Bolger was awarded the Queen Elizabeth II Silver Jubilee Medal in 1977, the New Zealand 1990 Commemoration Medal, the New Zealand Suffrage Centennial Medal in 1993, and was appointed a Member of the Order of New Zealand in 1998. He also has nine children and 18 grandchildren. "They were all important and very interesting positions to have, and I enjoyed it," Bolger said. "When you get to 90, and reflecting back over my variety of positions I've had across the world, and the countries I've visited, which are without number, there's so many, that it's just been very fortunate. "I've had a wonderful life with a wonderful wife and family, and it's all been good." As for advice he would give to New Zealanders, Bolger said the main thing would be to listen to others. "Don't try and dictate to them, listen to them, see what they're saying, see what their issues are, see what their concerns are, and then you might be able to make a sensible suggestion to help their lives. "And if you approach it from that direction, you know, how can I help this person or that person, then I'm sure you'll be much more satisfied with your life, and hopefully, they will be better off." Sign up for Ngā Pitopito Kōrero , a daily newsletter curated by our editors and delivered straight to your inbox every weekday.
