Source: Privacy Commissioner
If you find a security problem in the Officer of the Privacy Commissioners website, Privacy Commissioner John Edwards wants you to tell him about it. Mr Edwards has launched his offices Vulnerability Disclosure Policy in time for the New Zealand Internet Task Force (NZITF) conference in Wellington today. A vulnerability disclosure policy demonstrates the commitment we have to security. The policy publicly commits our office to responding promptly when advised of any vulnerability, he said. A vulnerability disclosure policy encourages people who find vulnerabilities in the Office of the Privacy Commissioners website to report them responsibly. The policy also gives a reassurance that the Privacy Commissioner will not seek to prosecute people who find vulnerabilities and follow the policy in reporting those. Mr Edwards hopes publishing his offices policy will encourage other agencies to follow the NZITFs guidelines on responsible disclosure.
