Skip to main content

Tuia 250 Privacy Breach Information Release

Independent Review of the Tuia 250 Voyage Trainee Privacy Breach

This report provides Manatū Taonga, the Ministry for Culture and Heritage with an independent review of the decisions and processes relating to the procurement and management of the Tuia 250 website and the circumstances that led to the breach of the privacy of applicants for the trainee crew programme. Manatū Taonga, the Ministry for Culture and Heritage has published its response to the recommendations of the independent report by the RDC Group Ltd

Published Date  Title 
18 December 2019 Final Report: Independent Review of the Tuia 250 Voyage Trainee Privacy Breach
18 December 2019 Ministry response to the Tuia 250 Voyage Trainee Privacy Breach Independent Review


The following documents relating to the Tuia Encounters 250 website, privacy breach and response have been proactively released by Manatū Taonga, the Ministry for Culture and Heritage on 18 December 2019.

Information Withheld

Some information has been withheld from this proactive release and, if requested, would be withheld under the Official Information Act 1982 (the OIA). Where this is the case, the relevant sections of the OIA that apply have been identified. Where information has been withheld, no public interest has been identified that would outweigh the reasons for withholding it.

Documents released
Published Date  Title
18-Sep-18 Procurement plan: Tuia Encounters 250 website
1-Oct-18 Request for proposal: Tuia Encounters 250 website design and build
25-Oct-18 Approval memo: Tuia Encounters 250 website design and build
5-Dec-18 Contract for services: Tuia Encounters 250 website design and build
22-Aug-19 Breach situation update – Thursday 7pm 
23-Aug-19 Breach situation update – Friday 10am
23-Aug-19 MCH Tuia 250 incident analysis: Initial summary
24-Aug-19 Situation report #1 – Saturday 4.30pm 
24-Aug-19 Situation report #2 – Saturday 8.00pm 
24-Aug-19 Talking points and Q and As for Prime Minister
24-Aug-19 Incident response and analysis service schedule: Service of work
25-Aug-19 Decision/action log: Privacy Breach – Sunday 12.30pm 
25-Aug-19 Situation report #3 – Sunday 2.45pm
25-Aug-19 Situation report #4 – Sunday 5.00pm
25-Aug-19 Security incident report
26-Aug-19 Dashboard – Monday 4.15pm
26-Aug-19 Situation report #5 – Monday 5.00pm
26-Aug-19 Security review service schedule: Service of work
27-Aug-19 Situation report #6 – Tuesday 5.00pm
28-Aug-19 Dashboard – Wednesday 4.15pm 
28-Aug-19 Situation report #7 – Wednesday 5.00pm
28-Aug-19 Questions and Answers
29-Aug-19 Situation report #8 – Thursday 5.00pm
30-Aug-19 Situation report #9 – Friday 5.00pm
30-Aug-19 Terms of reference for an independent review of the Tuia 250 voyage trainee privacy breach
02-Sep-19 Situation report #10 – Monday 5.00pm
03-Sep-19 Situation report #11 – Tuesday 5.00pm
04-Sep-19 Situation report #12 – Wednesday 5.00pm
05-Sep-19 Situation report #13 – Thursday 5.00pm
06-Sep-19 Situation report #14 – Friday 4.30pm
06-Sep-19 Tuia privacy breach review – FAQ for interviewees
11-Sep-19 Situation report #15 – Wednesday 5.00pm
12-Sep-19 Aide memoire to PMO
13-Sep-19 Situation report #16 – Friday 3.30pm
30-Sep-19 Tuia 250 Privacy breach recovery approach
04-Oct-19 Tuia privacy breach update 

Updated on 1st September 2022