Thread: First firearm data leak didn’t take long

Originally Posted by vulcannz

Technically speaking a cc/bcc generic reminder email isn't really a considered privacy breach. If the email content some actual information like names, phone numbers, or lists of firearms then it would be. I know it's debatable because it implies you might be a current LFO.

Doesnt really matter whether it is considered a privacy breach, it is still a fuck up from the Dept that made the biggest fuck up! Regardless of the technicalities, it should never have happened. Whether it be by human hand, or by a technological glitch. And just like 2019, they still fail to apologise for their mistakes. Instills a lot of confidence..........not!

at least it was only email addresses. still not on though

Originally Posted by RV1

Asking for a friend...

How about the following scenario: Local club wants more qualified/certified range officers. Does sticking your hand up for this mean you now come to the attention of the FSA and will have to register your toys sooner than you'd initially planned?

I've searched the FSA site and read the legislation, but cannot find an answer. Maybe it won't. Maybe it will. Perhaps its better to wait until next year and see how it all pans out...

Originally Posted by No good names left

I think only contact with the FSA or purchases are triggering, becoming a RO within your club should be ok. I would pose that question to someone in your club though.

On the plus side if you do have a triggering event would be there's some good bargains out there now with less people been cautious about buying stuff.

Contact with FSA has nothing to do with it. Becoming an RO is irrelevant to registration or activating events.

As firearms licence holders you are expected to understand the law. Go read it. You do not need to be a lawyer to read legislation.
Arms Act 1983 https://www.legislation.govt.nz/act/.../DLM72622.html and Arms Regulations 1992 https://legislation.govt.nz/regulati...DLM168889.html.
You don't need to read all sections or clauses, read the titles of them and read the ones that sound relevant. If you come across a defined term like "arms item" check the interpretation section/clause to see if it has a legal meaning. It'll either be a clause or section at the start of the act/regulations or within the part you are reading. For example Clause 36 in the Regulations provides a definition of "arms item".

For what is an activating event refer to the Arms Regulations. I think this is the third time I've posted this probably about time it's stickied somewhere so we can just point to it several times a day, the weird and wacky understandings on what is an activating event is bizarre it isn't so complicated that misinterpretation should be happening.
Refer directly to Arms Regulations 1992 - Clause 41 - "Initial obligation to provide information for registry if activating circumstance occurs". https://www.legislation.govt.nz/regu...LMS851206.html

In short the regulations require someone to register their arms items if:

• You're involved (technical wording is "has responsibility in relation to") in any of the events listed in Schedule 1B Part 4 of the regulations occur or if update any information detailed in Schedule 1B Part 1 (individual licence holder) or Schedule 1B Part 2 (dealer). https://www.legislation.govt.nz/regu...LMS851297.html
• You apply for a licence or endorsement to your licence.
• You are subject to compliance or enforcement action by the Police under the Arms Act.
• You purchase ammunition after 24 June 2025.

Any other interpretation other than what is black and white in the regulation is incorrect.

Yes - but. And that is the bits where this legislation contradicts itself and the info we've had coming out stating what we need to do to comply...

Originally Posted by No.3

Yes - but. And that is the bits where this legislation contradicts itself and the info we've had coming out stating what we need to do to comply...

Care to provide an example?

When you apply for or renew a licence or endorsement
If you notify us of a change in your licence holder information

This was copied from FSA site.
Taken in context from the original question, RV1 wouldn't need to register as he's not going to deal with the FSA to be a RO within his club

Originally Posted by No good names left

When you apply for or renew a licence or endorsement
If you notify us of a change in your licence holder information

This was copied from FSA site.
Taken in context from the original question, RV1 wouldn't need to register as he's not going to deal with the FSA to be a RO within his club

Why do you word it "he's not going to deal with the FSA" that's not an activating event and irrelevant you can deal with the FSA all you like that in of itself is not an activating event.
The two things you copied from the FSA site are though, they are correct.

If you notify us of a change in your licence holder information

Would replying to a bullshit E-Mail from the FSA to you as was demonstrated by the e-mails recently in the Data Breach not come under that clause. And if your information had not changed as was demonstrated in the recent e-mail cluster by FSA, What ?? is the FSA reaction going to be if you ignore them.

Originally Posted by Makros

Care to provide an example?

No. Can't easily without the context behind it which is giving out identifiable info - privacy and all that.

Well, the Privacy Commissioner is all over it, so the official arbiters of these things consider it a breach, and a fairly serious one, in this context. He's pretty unhappy.

Originally Posted by Growlybear

Well, the Privacy Commissioner is all over it, so the official arbiters of these things consider it a breach, and a fairly serious one, in this context. He's pretty unhappy.

By their own online tools recommendation this would NOT by a notifiable breach.

Originally Posted by vulcannz

By their own online tools recommendation this would NOT by a notifiable breach.

I listened to the guy. Because it's not just someone's power bill, it is an issue. When you make something compulsory, you ARE accountable for people's info in your system. It's not FB, where if you aren't happy about their security, you opt out. I'm actually quite flabbergasted that any firearms owner would find this remotely acceptable.

Originally Posted by Growlybear

Well, the Privacy Commissioner is all over it, so the official arbiters of these things consider it a breach, and a fairly serious one, in this context. He's pretty unhappy.

Makes me wonder if he is a FAL holder?

Pity the email fuckup didnt include a few names like Coster cahill etc etc - then they may take it seriously...

Originally Posted by Doghead

Makes me wonder if he is a FAL holder?

Pity the email fuckup didnt include a few names like Coster cahill etc etc - then they may take it seriously...

Cahill’s name would never be on a list like that. The man would wet his nappies if he was ever associated with the likes of us.

Originally Posted by Growlybear

I listened to the guy. Because it's not just someone's power bill, it is an issue. When you make something compulsory, you ARE accountable for people's info in your system. It's not FB, where if you aren't happy about their security, you opt out. I'm actually quite flabbergasted that any firearms owner would find this remotely acceptable.

Oh I don't find it acceptable, and I think it is preventable. I just think the privacy commissioner is making it out more than it is - against the privacy commissions own measure of what a reportable privacy breach is.

And in reality we are all putting out signals which light us up as likely firearms owners. Take this forum for example, by simply accessing it you are indicating you are a likely firearms owner. Who knows you are accessing it? Well for a start your ISP and the forum owners. But there is also the DNS provider you use, the hosting service in finland, and as the traffic probably transits the USA then the NSA are likely tracking it as well (I'm not joking about this).

Then there's other interesting things, do you have a smart phone? Have you ever visited a gunshop, a shooting range, or a firearms even... then it's likely that google (or apple) have this information and that's probably in the hands of the NSA.

We all leak data about ourselves on a massive scale.