If something goes wrong
What we do
- Contain it: stop the access, change keys and sign everybody out if needed.
- Find out what happened, whose information was involved and what kind.
- Decide whether it is likely to cause serious harm, and act on that decision quickly.
- Tell the organisation straight away. It does not wait for the full picture.
- Put it right, and change what let it happen.
Who is told, and when
- New Zealand: if a breach has caused, or is likely to cause, serious harm, the Privacy Commissioner and the people affected are told as soon as practicable after the organisation becomes aware of it.
- Europe and the United Kingdom: the supervisory authority is told within 72 hours of becoming aware of a breach that is likely to put people at risk, and the people affected are told without delay where the risk is high.
- Australia: the Information Commissioner and the people affected are told when a breach is likely to cause serious harm, under the Notifiable Data Breaches scheme.
- Elsewhere: the notice the local law requires.
The notice says what happened, what information was involved, what is being done, and what you can do to protect yourself.
What you can do
If you think your information has been seen by the wrong person, or your sign-in link has gone astray, tell your club and write to us straight away. You can sign out of every device from your settings.
Report a problem: richardbenson@outlook.co.nz.