On March 23, 2025, Amazon made headlines as it disabled a privacy setting on its smart speakers that had previously allowed users to store voice recordings locally. This decision has sparked widespread criticism among users and privacy advocates who now face the reality of having their voice recordings automatically sent to the cloud without an option to opt-out.
Experts in data privacy are voicing their concerns regarding this shift in policy. They argue that the move undermines user control over personal data and poses significant privacy risks. The implications of having voice recordings stored off-device have potential ripple effects on user trust, particularly given the growing scrutiny tech companies are facing over data privacy.
In a separate but equally alarming story, on March 24, 2025, a report dissecting privacy breaches at Oranga Tamariki (OT), New Zealand's Ministry for Children, exposed numerous serious flaws in the agency's handling of sensitive data. The report highlighted breaches so severe that it has drawn attention from legal professionals and regulatory bodies alike.
Among the numerous findings, one particularly egregious incident involved a staff member who shared a mother’s private information with the child’s father, which reportedly led to further abuse against the mother. The 67-page report outlined eight other cases of unauthorized access and disclosure of personal data, underscoring the systemic issues plaguing OT in safeguarding children’s sensitive information.
Lawyers were called in to investigate the agency following 35 serious privacy breaches that were flagged to the Privacy Commissioner between 2022 and 2023. The legal investigation revealed that OT's social workers frequently expressed disdain for privacy regulations, dismissing them as distracting and irrelevant to their cases. The review noted, "social workers who 'hated' privacy rules" viewed these regulations as obstacles rather than essential safeguards.
In the report, completed in April 2024 but withheld from the public for nearly a year, cases of harm included alarming scenarios such as a social worker divulging a child’s address to a father on bail for alleged rape and sensitive notes from an interview being sent to the child’s grandmother. These failures demonstrate a disturbing lack of protocol for protecting vulnerable families.
One instance included a sensitive family group conference that was secretly recorded and later published online, putting the child in a precarious situation of vulnerability and exposure. The report stated, "Each case represents a grievous breach," according to the independent review led by Dentons lawyer Linda Clark.
As the agency connected to such serious lapses, Oranga Tamariki has been mired in public scrutiny since its inception in 2017. Despite the serious nature of these privacy breaches, the agency indicated a lack of recent notifiable breaches in their internal practices, signaling a troubling disconnect between reported incidents and actual practices.
In the wake of the report's release, Philip Grady has been appointed as chief privacy officer at Oranga Tamariki, tasked with addressing the flaws in privacy management at the agency. His appointment came after a series of damning reviews and public outcries over the agency's handling of personal information. Grady noted, "Oranga Tamariki has not had any notifiable privacy breaches in the last 12 months,” while asserting their commitment to improve privacy measures moving forward.
The situation is further complicated by a broad lack of awareness of privacy responsibilities among staff, as the report indicated that many social workers view privacy as an “add-on” that complicates their interactions with families. The culture within the agency prioritizes case management over protecting sensitive information, raising questions regarding the agency's commitment to holistic care and protection for children.
For Oranga Tamariki to effectively safeguard personal information, the report emphasized the need for a cultural overhaul within the agency—"a fundamental change had to occur"—to correct the pervasive mindset that underestimates the significance of privacy.
In both cases of Amazon's voice recording changes and Oranga Tamariki's privacy breaches, the lessons learned revolve around trust and the importance of robust privacy practices in protecting individuals' rights. The decisions and actions taken by these organizations influence public perceptions and trust over data usage and management.
The past year has highlighted the critical nature of these issues, with consistent media scrutiny on organizations mishandling data. For Amazon, the implications of their recent choices could result in a heightened sense of scrutiny and backlash from consumers. For Oranga Tamariki, ongoing public confidence may hinge on their ability to address and rectify past failures in privacy management.
With conversations surrounding data privacy growing louder, both Amazon and Oranga Tamariki embody the wider challenges that organizations face globally as they balance technological advancement and the protection of individual rights. Going forward, the need for transparency in data practices and rigorous adherence to privacy laws is paramount.
