This week has seen the release of both the Independent Review of Accident Compensation Corporation's (ACC) Privacy and Security of Information, and the Auditor-General's Inquiry into aspects of ACC's Board-level governance. Both investigations stemmed from the privacy failings of ACC in August 2011.
The Independent Review outlines recommendations for improving privacy systems and processes within ACC across seven areas including board governance, leadership and privacy strategy, privacy programme, culture, accountability, business processes and systems, and backlogs and establishment of the new business as usual. The Review accepts the Auditor-General's recommendations.
The Auditor-General initiated an Inquiry to investigate whether the ACC Board had policies and procedures for managing interaction between Board members and individual claimants who might be known to them. The Inquiry found that the Ms Pullar's specific claim with ACC was not affected by her approaching a Board member. However, it also found that the Board had no formal policy to guide Board members on communication with individual claimants. The Inquiry found that ACC management and Board members failed to appreciate the risks associated with Ms Pullar's allegations of illegality and fraud.
The Minister for ACC, Judith Collins, welcomed both the Review and Inquiry and noted that the Service and Purchase Agreement put in place by the Government will lead to better governance and operation of ACC. The Minister stated that she expects the Review's timeline for improvements at ACC to be met as a priority.