Skip to main content

Tuia Privacy Breach Independent Review, Response and Proactive Release

Media release: 18 December 2019

Final Report: Independent Review of the Tuia 250 Voyage Trainee Privacy Breach 

Published 18 December

This report provides Manatū Taonga, the Ministry for Culture and Heritage with an independent review of the decisions and processes relating to the procurement and management of the Tuia 250 website and the circumstances that led to the breach of the privacy of applicants for the trainee crew programme.

Ministry response to the Tuia 250 Voyage Trainee Privacy Breach Independent Review 

Published 18 December

Manatū Taonga, the Ministry for Culture and Heritage has published its response to the recommendations of the independent report by the RDC Group Ltd.

Proactive Release

Published 18 December

The following documents relating to the Tuia Encounters 250 website, privacy breach and response have been proactively released by Manatū Taonga, the Ministry for Culture and Heritage.

Information Withheld

Some information has been withheld from this proactive release and, if requested, would be withheld under the Official Information Act 1982 (the OIA). Where this is the case, the relevant sections of the OIA that apply have been identified. Where information has been withheld, no public interest has been identified that would outweigh the reasons for withholding it.

Documents released
Date Creator Title
18-09-18 MCH Procurement plan: Tuia Encounters 250 website
01-10-18 MCH Request for proposal: Tuia Encounters 250 website design and build
25-10-18 MCH Approval memo: Tuia Encounters 250 website design and build
05-12-18 MCH Contract for services: Tuia Encounters 250 website design and build
22-08-19 MCH Breach situation update – Thursday 7pm 
23-08-19 MCH Breach situation update – Friday 10am
23-08-19 Aura MCH Tuia 250 incident analysis: Initial summary
24-08-19 MCH Situation report #1 – Saturday 4.30pm 
24-08-19 MCH Situation report #2 – Saturday 8.00pm 
24-08-19 MCH Talking points and Q and As for Prime Minister
24-08-19 Aura Incident response and analysis service schedule: Service of work
25-08-19 MCH Decision/action log: Privacy Breach – Sunday 12.30pm 
25-08-19 MCH Situation report #3 – Sunday 2.45pm
25-08-19 MCH Situation report #4 – Sunday 5.00pm
25-08-19 Aura Security incident report
26-08-19 MCH Dashboard – Monday 4.15pm
26-08-19 MCH Situation report #5 – Monday 5.00pm
26-08-19 Aura Security review service schedule: Service of work
27-08-19 MCH Situation report #6 – Tuesday 5.00pm
28-08-19 MCH Dashboard – Wednesday 4.15pm 
28-08-19 MCH Situation report #7 – Wednesday 5.00pm
28-08-19 MCH Questions and Answers
29-08-19 MCH Situation report #8 – Thursday 5.00pm
30-08-19 MCH Situation report #9 – Friday 5.00pm
30-08-19 MCH Terms of reference for an independent review of the Tuia 250 voyage trainee privacy breach
02-09-19 MCH Situation report #10 – Monday 5.00pm
03-09-19 MCH Situation report #11 – Tuesday 5.00pm
04-09-19 MCH Situation report #12 – Wednesday 5.00pm
05-09-19 MCH Situation report #13 – Thursday 5.00pm
06-09-19 MCH Situation report #14 – Friday 4.30pm
06-09-19 MCH Tuia privacy breach review – FAQ for interviewees
11-09-19 MCH Situation report #15 – Wednesday 5.00pm
12-09-19 MCH Aide memoire to PMO
13-09-19 MCH Situation report #16 – Friday 3.30pm
30-09-19 MCH Tuia 250 Privacy breach recovery approach
04-10-19 MCH Tuia privacy breach update 


© Crown Copyright, Creative Commons Attribution 4.0 International (CC BY 4.0)


Updated on 18th December 2019