A document containing the personal details of more than 30 children in unapproved Oranga Tamariki placements has been accidentally shared with a member of the public.
Oranga Tamariki has apologised and is now in the process of contacting those affected by the shared document, which included allegations of abuse, a police visit and a parent being arrested.
Privacy law expert Kent Newman told the聽贬别谤补濒诲听he was speechless at the breach, saying it was 鈥渦nspeakably bad practice鈥.
鈥淭hat document should never have been created. Once it was created, it needed to have appropriate safeguards around it,鈥 said Newman, a Victoria University of Wellington PhD candidate.
聽鈥淧ut a password on the document, limit control to that document, and minimise the amount of information.鈥
Newman said Oranga Tamariki should have a password-protected database.
鈥淓very corporate in New Zealand of a reasonable size is doing this and is concerned about this and doing this better than the Government. The Government keeps getting caught with these practices that are just simply below what the law requires them to do. I mean this is terrible.鈥
It was shocking that issues like this had been happening for more than a decade and the Government had not lifted its game.
聽鈥淭here are multiple layers that have clearly failed here.鈥
This breach is the latest in a recent series of woes for the agency, which revealed earlier this month聽聽had been charged by police.
Service delivery deputy chief executive Rachel Leota said the error was 鈥渄eeply regrettable鈥, and apologised to those whose privacy had been breached.
She told the聽贬别谤补濒诲听the Privacy Commissioner was alerted the same day as the breach and the agency was working with his office to address the breach.
鈥淥ranga Tamariki is making all efforts to contact those affected. The welfare of families that we engage with at Oranga Tamariki is incredibly important and we consider any breach of privacy to be extremely serious.鈥
She said the breach occurred as a result of human error when the spreadsheet was mistakenly forwarded to a person they were communicating with on another matter.
Leota said data within Oranga Tamariki was managed in accredited systems and spreadsheets were used for some day-to-day tasks but not for long-term storage of information.
鈥淥ranga Tamariki recognises our data system requires improving and is in the process of doing this.鈥
The document also detailed the children鈥檚 names, birthdays and what action Oranga Tamariki workers had deemed necessary, including medical reports.
The woman who was accidentally sent the document said she was shocked but given her聽, she was not surprised by the breach.
鈥淚 would feel so angry if it was me and if I knew about it [would] want an apology and answers.鈥
A wide-ranging review of the agency released last month found the need for significant improvements in children鈥檚 residences.
The rapid review into Oranga Tamariki鈥檚 Youth Justice and Care and Protection residences was announced in June 2023 afterinvolving staff acting inappropriately.
It recommended improvement to leadership and governance, culture, behaviours and values, rangatahi and tamariki experience, workforce management and development as well as to health, safety and wellbeing, systems and structure, partnerships, as well as resources and assets.
Katie Harris is an Auckland-based journalist who covers social issues including sexual assault, workplace misconduct, crime and justice. She joined the聽Herald聽in 2020.
Take your Radio, Podcasts and Music with you
Get the iHeart App
Get more of the radio, music and podcasts you love with the FREE iHeartRadio app. Scan the QR code to download now.
Download from the app stores
Stream unlimited music, thousands of radio stations and podcasts all in one app. iHeartRadio is easy to use and all FREE