10. Question No. 10—Arts Culture and HeritageDr SHANE RETI (National—Whangarei) to the Minister for Arts Culture and HeritageQuestion No. 10—Arts Culture and Heritage10. Dr SHANE RETI (National—Whangarei) to the Minister for Arts Culture and Heritage: Does she stand by all her policies statements and actions around cybersecurity and the Tuia 250 breach?Rt Hon JACINDA ARDERN (Minister for Arts Culture and Heritage): Yes I do including my endorsement of the work that the ministry is doing to establish how this occurred via the Tuia website. I also take the opportunity to extend an invitation to members from across the House that although Tuia's configuration has changed somewhat under this Government it was still a programme instigated under the last Government and I am sure they would be keen to engage with the programme as its beginning looms large.Dr Shane Reti: What sort of data was breached in the two further data breaches at her ministry in the month prior to the Tuia 250 data breach?Rt Hon JACINDA ARDERN: Yes I am aware that the member will of course be familiar with those two incidents. We responded in a written question around both. Those two breaches include firstly an email that was incorrectly addressed and went to the wrong sender; it was subsequently deleted. The second issue was in relation to a database of email contacts that was supplied in an augmented way to a third party for the purposes of memorial planning. However the Ministry for Culture and Heritage (MCH) privacy officer subsequently signalled that they should have enabled contacts on the list to opt out if they wanted to. They immediately therefore withdrew the database from the third party and they then confirmed they had no copy of it.Dr Shane Reti: What actions did she take if any after the two data breaches in her ministry that could have prevented the Tuia 250 data breach?Rt Hon JACINDA ARDERN: As the member can see those data breaches were very specific ones—ones in which MCH's privacy officers themselves internally identified the issues. I believe that they also consulted with the State Services Commission over those two breaches and they considered them to be low level. Obviously they are also very distinct issues to what happened in the case of Tuia as I'm sure the member will agree.Dr Shane Reti: Can she confirm that cellphone numbers of children under 18 were breached in the Tuia 250 data breach?Rt Hon JACINDA ARDERN: Yes the member will obviously raise this question in the House. There were in the application forms areas where some parents of applicants' information was provided or indeed contact details provided of the applicants themselves some of which were under 18 and I can confirm that in a small number of cases that included the cellphone numbers of under-18s. Dr Shane Reti: What are the personal relationships described in written question 30536 between the Tuia 250 developer and at least one ministry staff member"?Rt Hon JACINDA ARDERN: Rather than getting into any detail that may be covered off by the independent reviewer I would prefer to leave that matter to the independent reviewer. They will be reporting in October and I expect that we will be able to have a public release of that information thereafter. Of course the ministry has protocols in place around conflicts of interest as does every other ministry which of course we've an expectation be obliged and followed.Dr Shane Reti: I seek leave to table a series of unpublished written parliamentary questions Nos 30421 30643 and 30536 around my questions today.SPEAKER: I will put it to the House. I just want to express my reluctance at that practice. These are matters which will be very shortly available to all members. If the member wants to make them publicly available he can; he doesn't need to do it here and we could have major time-wasting if it became a habit. I will put it however to the House. Is there any objection to those documents being tabled? There appears to be none.Documents by leave laid on the Table of the House."