Story image

Former Deloitte consultant to head MSD privacy breach review

18 Apr 2017

Former Deloitte consultant Murray Jack, along with IT and privacy specialists from Deloitte and PwC will lead a review into the Ministry of Social Development’s individual client level data IT systems following a privacy breach.

Social Development Minister Anne Tolley announced the review last week after a report on the privacy breach ‘raised more questions than answers’ about the security of the IT system and governance of the project.

The actions follow the April 05 shutdown of the MSD’s information sharing system after it was discovered that a provider could access information in another provider’s folder.

Tolley says no private information on clients were in the folder.

The independent review comes just over a week after Privacy Commissioner John Edwards called the MSD’s policy requiring social service providers to disclose information about all their clients ‘excessive and inconsistent with privacy principles’.

Only 10 providers have uploaded information so far into the government shared portal, despite 136 providers being invited to upload client level data.

Tolley says the review, which is due to report back by the end of April, will ‘consider the circumstances which lead to the technical breach, the decisions made on why the portal was used and the security steps taken, as well as the governance and management of the project’.

“It’s important clients and providers have confidence that their information is protected and that the Government has a robust IT system,” Tolley says.

The system has faced opposition from some, including the PSA, which says it is worried that NGOs working with vulnerable families are being asked to share data of such a sensitive nature.

The PSA, which welcomed the independent review, says even if the security issues are resolved it won’t overcome its objections to NGOs being required to provide data on their clients to MSD, with the organisation ‘not convinced the gains of doing so outweigh the risks’.

Five things MSPs need to keep in mind in 2019
A Datto APAC channel exec outlines the most important factors for MSP to being paying attention to in the coming year.
VMware allures APJ channel veteran to take the reins
Balasingam will take on the role of vice president for VMware’s partner business in Asia Pacific and Japan (APJ).
Better data management: Whose job is it?
An Experian executive’s practical advice on how to structure data-management roles within a modern business environment.
Platform9 and Intersect partner to bring unified cloud to A/NZ
“For Intersect, Platform9 represents the single most strategic solution to a set of challenges we see expanding across the board."
Gartner: AI to reduce project management workload
80% of the work performed project management teams will be taken over by AI by 2030, starting this year.
Microsoft Teams’ eight new and upcoming features
After taking Best in Show at Enterprise Connect, Microsoft Teams will be seeing eight new capabilities over 2019.
IDC: NZ's PC market surprise growth will not last
Despite the growth witnessed at the end of 2018, IDC predicts that New Zealand’s traditional PC market in 2019 will decline by -4.4% YoY.
OutSystems and Boncode team up for better code analysis
The Boncode and OutSystems alliance aims to help organisations to build fast and feel comfortable that the work they're delivering is at peak quality levels.