ACC writes to wrong person
ACC is not treating privacy seriously enough, says a woman who was accidentally sent confidential information.
JoAnn Crowley was sent details of an ACC claimant she does not know.
It is the second time she has incorrectly been sent confidential details from the corporation, which she says shows inadequate and concerning privacy protection.
But ACC says it takes any privacy breach seriously and investigates all privacy complaints.
Ms Crowley received the letter from ACC on September 14, detailing information about a woman who was injured at work and was supposedly her employee.
Ms Crowley does not have any employees but rang the corporation to discover the client works at a cafe with the same name as a cafe she used to manage four years ago.
She says if ACC can make a privacy breach through something as simple as a business with the same name, then it is not taking privacy seriously enough, despite a damning report released just last month from the privacy commissioner.
"When I saw the letter I thought ‘here we go again' because I'd received one once before probably about two years ago. After this debacle with ACC that's been in the news for so long and everyone being concerned about privacy issues, and the fact that this has happened again makes me think that it's not being addressed properly," she says.
"If it was me I would be mortified that any information of mine went to anybody else, other than the person it was supposed to," Ms Crowley says.
"There must be heaps of businesses with the same name."
ACC has been under fire over privacy breaches since March, when it was revealed the private details of more than 6500 clients were accidentally sent to a claimant.
A report by privacy commissioner Marie Shroff says systematic weaknesses in the organisation and an almost cavalier attitude led to the breach.
But Ms Crowley says change clearly hasn't happened yet.
ACC senior media adviser Stephanie Melville says ACC takes any privacy breach seriously and investigates all privacy complaints as soon as advised.
"The first priority is to contact the person who has received the information in error and ensure its return or confirmation of immediate destruction.
"ACC contacts the affected client to advise what steps have been taken to retrieve their information and to apologise."
Ms Melville says ACC privacy systems and processes will continue to be improved and the organisation will be implementing all the recommendations from the Office of the Privacy Commissioners report.
"ACC must show clients and levy-payers that change is occurring, that it is responding quickly and that it can demonstrate that information is being treated with the care and respect it deserves."
But Ms Melville says the corporation relies on information given to it.
- © Fairfax NZ News