By Adam Ray
One advocate for beneficiaries says she warned the Ministry of Social Development a year ago that its kiosks were vulnerable.
As a campaigner for beneficiary rights, Kay Brereton often protests against benefit cuts. But she also works with WINZ - last year helping test their new kiosks.
“It was to have a client experience,” she says, “and we had a client experience that showed us clients could get a long way and so we warned them”.
Ms Brereton says it was easy for her colleague to get private information from the kiosk
The Ministry of Social Development says it fixed the problem, but blogger and freelance journalist Keith Ng revealed this week that the kiosks could be used by any member of the public to access confidential records.
Chief executive Brendan Boyle says it’s “very disappointed that the system was able to be accessed so easily”.
The Ministry of Social Development is the latest agency saying sorry for a privacy stuff-up. ACC recently emailed details of thousands of clients to a former client.
Prime Minister John Key admits some agencies need to upgrade their IT systems.
“[They’re] a bit clunky,” he says.
The assistant privacy commissioner says companies are guilty of data breaches too – Google was recently told to destroy information it gathered from unsecured WiFi networks.
“I think that we used to be confident that we could lock things in a filing cabinet – in the modern digital world that’s not the case anymore,” says Katrine Evans.
IT experts say it should be compulsory for an agency or company to report a privacy breach.
“The sort of failures we are seeing are the IT equivalent of bridges falling down,” says Paul Matthews, chief executive of the New Zealand Institute of IT Professionals.
The Ministry of Social Development says it will get the kiosks operating again once they're proven to be secure. It will take longer to repair the public faith in its privacy safeguards.
3 News