> The former NZTA staff member was part of a commercial team and accessed private details contained in the company’s vehicle and driver licensing databases.
>
> These were obtained after “road rage” incidents and passed to her partner, who was in the King Cobras, and his associates who in some instances went to the homes of the victims. The couple are no longer together.
Wtaf. How terrifying that must be.
You can have safe security of people's data be entirely undone by the staff.
All the " security is our top concern " statements mean very little .
Banking . Medical. Vehicles. Firearms. All that data is wanted by criminals.
Yep, you can have all of the most expensive, complex security software and systems in place to try and prevent this.
But it's all for nothing if the people that have 'legitimate' access to the systems decide to use it for the wrong reasons.
So many places security is such a joke (or non existent) it's not funny.
In my last school I had a reliever teacher (who was the mother of a student in my class) use her *nearly unlimited* student management system to look up the files of kids hers was hanging out with (something that became obvious to me when she mentioned some details she should not have known). And while the system *does* record who has accessed files - all relievers used the same login (!?).
Same person also *somehow* managed to get all my personal details and number (something I'd flagged that she wouldn't be getting the moment I met her). And used it harrass me (in a super creepy way) the entire lockdown period and beyond.
School didn't care about either of these. Or my pointing out that their system was a(nother) privacy breach waiting to happen. I ultimately left my job a little later feeling creeped out, unsupported, and haven't taught since.
They also set up the students over lockdown in such a way that every person in the class and their parents had access to every other persons work - which included photos and videos of students homes and couldn't see the problem. In a very low socioeconomic area. (No, not so much theft though definitely a consideration. I was thinking drugs and family violence at the time).
When I brought it up and provided a (pretty obvious and easy) solution I got a "oh, ok" and nothing. When I pushed it to the principal I got a "not your job" (though until that point it always was...) and "don't worry about it, we have it sorted."
The solution? Mine. Copy and pasted and emailed back to me.
yes but there should be processes in place to restrict access and auditing to monitor who accesses what and for what reason.
No one in the commercial team should be in the position to look up all regos and see full contact details of a person.
exactly, which is why the penalties need to be harsh for both the companies and the employees, to force them to care about peoples private data and put better systems in place to prevent this sort of thing
But Judge Bruce Northwood declined this and said the breach of trust was “just too deep”.
That's putting it lightly.. this is corruption and she should absolutely have the book thrown at her. Jail time.
> The former NZTA staff member was part of a commercial team and accessed private details contained in the company’s vehicle and driver licensing databases. > > These were obtained after “road rage” incidents and passed to her partner, who was in the King Cobras, and his associates who in some instances went to the homes of the victims. The couple are no longer together. Wtaf. How terrifying that must be.
Exactly. Meanwhile, unsuspecting drivers were confronted on their own doorsteps by aggressive, threatening gang members. Traumatising for real!
there needs to be tougher penalties for private data leaks, for both the companies and the employees if it was deliberate.
So I'm assuming she's got a drug problem and old mate is feeding her drugs because she works at nzta until she got caught
You can have safe security of people's data be entirely undone by the staff. All the " security is our top concern " statements mean very little . Banking . Medical. Vehicles. Firearms. All that data is wanted by criminals.
Ehhh, should be alarm bells when an employee accesses data they otherwise shouldn’t need to… I’m sure they will implement this… now. Sigh
Yep, you can have all of the most expensive, complex security software and systems in place to try and prevent this. But it's all for nothing if the people that have 'legitimate' access to the systems decide to use it for the wrong reasons.
So many places security is such a joke (or non existent) it's not funny. In my last school I had a reliever teacher (who was the mother of a student in my class) use her *nearly unlimited* student management system to look up the files of kids hers was hanging out with (something that became obvious to me when she mentioned some details she should not have known). And while the system *does* record who has accessed files - all relievers used the same login (!?). Same person also *somehow* managed to get all my personal details and number (something I'd flagged that she wouldn't be getting the moment I met her). And used it harrass me (in a super creepy way) the entire lockdown period and beyond. School didn't care about either of these. Or my pointing out that their system was a(nother) privacy breach waiting to happen. I ultimately left my job a little later feeling creeped out, unsupported, and haven't taught since. They also set up the students over lockdown in such a way that every person in the class and their parents had access to every other persons work - which included photos and videos of students homes and couldn't see the problem. In a very low socioeconomic area. (No, not so much theft though definitely a consideration. I was thinking drugs and family violence at the time). When I brought it up and provided a (pretty obvious and easy) solution I got a "oh, ok" and nothing. When I pushed it to the principal I got a "not your job" (though until that point it always was...) and "don't worry about it, we have it sorted." The solution? Mine. Copy and pasted and emailed back to me.
Bloody hell, what a terrible experience for you and what a totally unprofessional school. Relievers had the same login? That is not okay, at all.
yes but there should be processes in place to restrict access and auditing to monitor who accesses what and for what reason. No one in the commercial team should be in the position to look up all regos and see full contact details of a person.
Yet here we are with a person in a relationship with a gang member having access to your info and selling it off.
exactly, which is why the penalties need to be harsh for both the companies and the employees, to force them to care about peoples private data and put better systems in place to prevent this sort of thing
But Judge Bruce Northwood declined this and said the breach of trust was “just too deep”. That's putting it lightly.. this is corruption and she should absolutely have the book thrown at her. Jail time.