Latest / Early Edition with Ryan Bridge / Francesca Rudkin: If you want trust, you must accept consequences

Transcript

Francesca Rudkin: If you want trust, you must accept consequences · Early Edition with Ryan Bridge

• 0:00
  Speaker 1: Now. This week, New Zealand's Privacy Commissioner was right to
• 0:02
  Speaker 1: argue that the law should be changed to allow agencies
• 0:04
  Speaker 1: to be fined when they failed to protect people's sensitive
• 0:07
  Speaker 1: personal information. In an increasingly digital society, we're being encouraged
• 0:11
  Speaker 1: to trust organizations with highly confidential data, including medical records,
• 0:15
  Speaker 1: financial details, and personal identification information. Whether that trust must
• 0:20
  Speaker 1: come accountability. The recent cyber attack involving Manage My Health
• 0:24
  Speaker 1: highlights my strong enforcement powers unnecessary When a system like
• 0:28
  Speaker 1: this has compromised, the consequences can be severe, including identity theft,
• 0:32
  Speaker 1: privacy violations, and loss of confidence in digital healthcare services.
• 0:36
  Speaker 1: While an investigation followed the breach, many New Zealanders were leaft,
• 0:40
  Speaker 1: wondering whether anyone would face meaningful consequences. Too often, organizations
• 0:44
  Speaker 1: can have a data breach without being held directly accountable
• 0:47
  Speaker 1: for inadequate security practices. These concerns become increasingly significant as
• 0:53
  Speaker 1: New Zealand moves towards digital driver licenses and other forms
• 0:56
  Speaker 1: of digital identity. While digital licenses for convenience, efficiency, and
• 1:01
  Speaker 1: are the way of the future, they also create a
• 1:03
  Speaker 1: centralized repository of highly valuable personal information. If we're expected
• 1:09
  Speaker 1: to carry our identity and digital form. We need to
• 1:11
  Speaker 1: be confident the systems protecting our information meet the highest
• 1:15
  Speaker 1: security standards. Where negligence or failure to meet these standards
• 1:19
  Speaker 1: contributes to a breach, substantial financial penalties should be an
• 1:23
  Speaker 1: available option. Privacy Commissioner Michael Webster says that when it
• 1:26
  Speaker 1: comes to accountability for failing to protect in an individual's privacy,
• 1:30
  Speaker 1: New Zealand's laws are somewhat out of step with those overseas.
• 1:34
  Speaker 1: The possibility of significant finds would create an incentive for
• 1:38
  Speaker 1: organizations to invest in preventing rather than simply managing the
• 1:41
  Speaker 1: fallout after a breach. Sends a clear message that protecting
• 1:44
  Speaker 1: personal data is a fundamental responsibility. If organizations and government
• 1:49
  Speaker 1: agencies expect the public's trust, they must also accept meaningful
• 1:52
  Speaker 1: consequence when that is broken. For more from Early edition
• 1:57
  Speaker 1: with Ryan Bridge, listen live to Newstalks be from five
• 2:00
  Speaker 1: am weekdays, or follow the podcast on iHeartRadio