ACC chair on independent review of ACC privacy

A press release from ACC by Paula Rebstock

ACC and the Board want to thank the authors for the work they have done and the considered way they have presented the findings.
We will be implementing the recommendations made in full.
On behalf of the Board and ACC, I undertake that we will respond to the challenge before us.
ACC has a clear sense of purpose which is to help individuals, communities and businesses return to independence after accidents. The events over the last six months have raised profound questions about our management of information.
ACC must show customers and stakeholders that change is occurring, that we are responding quickly and that we can demonstrate that people’s personal information is being treated with the care and respect it deserves.
We need processes that help minimise errors with safeguards to provide checks and back-ups. If something does go wrong, we must have systems to respond quickly and appropriately, and just as importantly, we need to find out what went wrong so we can try to prevent it happening again.
The responsibility for this sits with the Board and Management of ACC to provide our people with the environment, tools and processes they need to manage information appropriately.
The review outlines seven broad areas for improving systems and processes with a series of detailed recommendations under each. Just as important, we need strong leadership, the right culture and unquestionable commitment to privacy – and that starts with the Board.
I would also like to acknowledge the work of the Auditor General and the Inquiry Report that was released today into aspects of ACC’s Board-level governance following the breach.
The OAG report recognises the critical importance of having clear and detailed protocols for dealing with communication between Board members and clients.
We accept the conclusions and will incorporate all the OAG recommendations to ensure our practices, training and Governance Manual underpin and support sound governance practice. This includes how the Board and management address any allegations of improper conduct.
The Board is clear about its responsibility and has undertaken to implement the measures in the Auditor General’s report.
Both the Independent Review of ACC and the Auditor General’s report will form part of a programme of work against which ACC can be measured.
We have put in place a structure to lead this work, and we will engage external specialist advice to help plan and prioritise the work ahead of us.
ACC will work closely with the Privacy Commissioner to measure and monitor progress on implementing the recommendations which include regular public reporting of results.

http://www.scoop.co.nz/stories/PO1208/S00352/acc-chair-on-independent-review-of-acc-privacy.htm