OIA Adventures: NZ School Formals and Homophobia

Part 1 | Part 2 | Part 3

Just to clarify, there are other responses, they’re just not included in this post. These are the ones that I thought were interesting, for one reason or another, and are more based around transparency and the Official Information Act process than same-sex dates and after parties.

 

Does anyone remember St Patrick’s College in Wellington? Last year in June a story broke about how a male student, who happened to be gay, wasn’t allowed to bring a male friend (and ex-student) to his school ball/formal. The school said it was a management issue if they allowed ex-students or boys from other schools to attend school events.

Gay pride Tel-Aviv

Official Information Act

Idiot/Savant suggested sending an Official Information Act request to each state and integrated secondary school (private/independent schools aren’t covered under the OIA) asking whether they had a policy on same-sex dates would reveal how widespread this was.

I think I was either sick, or school was closed because of some natural event one day, so that’s what I did. I also included a question about events before and after the ball/formal.

I used the TKI schools database and Google Docs, and sent the request to schools that have year 12/13 students to the email address listed as their contact address.

The OIA technically applies to Board of Trustees, but as principals should be on the BOT, and know about what I was asking, I didn’t mind them replying.

Here’s the email:

Subject: Official Information Act Request – School Ball/Formal

Dear Sir/Madam at [school],

If you hold a school ball or formal could you please answer the following questions? Do you have a policy on same-sex dates? If so, could you please email me a copy of that policy?

In the past, has the school banned same-sex dates from attending the school ball or formal? If so, could you please provide details?

Do you have a policy on parties before/after the school ball or formal? If so, could you please email me a copy of that policy?

This email address is listed as the contact address for this school. If this email has found you in error, please let me know. http://www.justice.govt.nz/publications/global-publications/o/official-information-your-right-to-know/publication/.

Thank you in advance.

Yours faithfully

Matt Taylor

I sent a reminder email to schools that hadn’t replied around the middle of the 20 day response period. Some people didn’t like the part about complaining to the Ombudsmen (which you’ll see below).

Subject: Official Information Act Request – School Ball/Formal Follow-up

Dear Sir/Madam at [school],

I sent you an Official Information Act request on June 15th regarding school balls/formals. Under the Official Information Act, requests must be answered within 20 working days. I have not received a response from you to date. If I don’t receive a reply within 20 working days I can complain to the Ombudsmen. The Ministry of Justice explains the Official Information Act here: http://www.justice.govt.nz/publications/global-publications/o/official-information-your-right-to-know/publication/. For your reference my request is below.

If you hold a school ball or formal could you please answer the following questions?

Do you have a policy on same-sex dates? If so, could you please email me a copy of that policy? In the past, has the school banned same-sex dates from attending the school ball or formal? If so, could you please provide details?

Do you have a policy on parties before/after the school ball or formal? If so, could you please email me a copy of that policy?

Thank you in advance.

Yours faithfully

Matt Taylor

Over the next few weeks I’ll post some lessons learned and the responses I received back from the schools. Many of the requests/schools are before the Ombudsmen (like Idiot/Savant predicted, schools have minimal experience with the OIA [see below]). I’ll post the result of those when I get them.

John Holley from Liston College: “Firstly an apology on the delay beyond the 20 days for you OIA request. This is the first formal OIA request the school has had to deal with in a long time (if ever) so the staff were unsure how to deal with it.” [response to questions was below this]

Below are some interesting responses from some schools.

Spam

Some schools reported not receiving my original email. This might have been because of spam filters. Organizations need to occasionally flick through their spam folders for non-spam content.

Who are you??///???@@@!

Some schools were angry that I didn’t say who I was working for (no one), and exactly why I wanted the information (for the internets). They’re accountable to the people, and their policies and decisions should be transparent. Their response shouldn’t change depending on who is asking for the information and what they want it for (and the OIA doesn’t require people to disclose reasons for requesting information).

In most cases I replied back saying that it was for a blog post, that they weren’t the only school I was asking and that I don’t work for the media. I don’t think it was inappropriate to hold back information (basically hold the data hostage) before I responded to their questions, or complied with some extra request (like sending them a letter, sending them ID, phoning them etc.), which some schools did. I think this could be interpreted as their fear of the media. Some schools asked for more information about me and responded to the questions in the same email, which was fine.

Some of the schools below did eventually respond to the questions.

Steve Saville from Alfriston College: “Could you please identify yourself/organisation and explain why you are gathering information.”

Penny Mossman from Amuri Area School: “I/we have not received any previous email from your organisation. I do not like the threatening tone of your email [the second one, with the bit about the Ombudsman) and I will not respond to requests from any organisation that has not made itself personally known to us or one that we have no idea who they are.”

Tanya Phillips from Aranui High School: “Can you supply some information for us on this please;

What organisation do you represent?
What is this information being used for?
Where will this information be published?

As soon as we get that information, I will be more than happy to answer your questions.”

‘Admin’ from Baradene College: “Please send your formal request to our Board Chair:  Mr Edmund Lawler, Chairman of the Baradene Board of Trustees, c/o Baradene College, Private Bag 28906, Remuera, Auckland, 1541.  This will need to be on an official letterhead making your request explicit.”

Mason Stretch from Cromwell College: “Please provide our Board with some background to your request.”

Allan Vester from Edgewater College: “I am not sure about the Official Information Act request? Is this actually an official request or was the header there to get my attention.

I would be happy to answer your questions if I had some understanding of why you want the information?

Just one point on policies. There seems to be some idea that schools have policies for everything “Policy on Student parking” Policy on Towing Away Student Cars” etc.

The actual policies that schools must have as prescribed by the Education Act is actually quite small eg a Policy on Protected Disclosure is a requirement.

I think what you will find is that when people talk about policies they are actually talking about the commonly accepted procedures that the school applies in certain situations? [This is a very good point, I should have probably included procedures and practices in the wording of the emails]

If it is the school ball you are interested in then we will have procedures/ rules about which students or other persons are able to attend the ball, the time they must be at the Ball by, the standard of behaviour required etc but there is no policy on those.”

Murray Burton from Elim Christian College: “In accordance with section 9 (2) (k) of the Official information Act, we respectfully decline your request due to the following.

We at this stage have no information regarding the following:

Who is asking for the information, who they represent, their background etc…
For what purpose is this information requested
What part of society is represented
On what basis do you think your request is covered by the Act

Due to all these unknowns we regretfully feel that your request is of a nature that was not intended as part of the Purpose of this Act. “”

My reply:

“Thanks for your reply. I’ve identified myself as Matt Taylor and I’m not representing an organization.

The Official Information Act doesn’t require me to provide background or extra details on why I’m requesting the information.

I’m not sure what you mean by the society question.

The Official Information Act actually applies to your Board of Trustees, so if you’re not comfortable answering the questions please forward this request to your board’s chair.”

Murray: “As a full member of the Board of Trustees I am happy and authorized to work with you concerning your requests.

I would still like to know the following:

Please outline specifically why you wish to receive this information?
What will it be used for?”

My reply: “The Official Information Act doesn’t require me to provide background or extra details on why I’m requesting the information.”

Murray: “Please do not think that we are being uncooperative. We realise we need to comply with the law but we are also wise and discerning concerning our school and the release of information hence email process we are following with you is exactly on that basis.

I am more than happy to release your requested information when I am in receipt of your answers to the following questions

Please outline specifically why you wish to receive this information?
What will it be used for?”

[I didn’t provide the requested information and the request is currently before the Ombudsman.]

Donna Thian from Ellesmere College: “Before I pass this on for reply please identify who you are and why this is being asked of us.”

Jude Conway from Gisborne Girls’ High School: “I acknowledge receipt of your email requesting clarification of Gisborne Girls’ High School’s policy and procedure in respect of same-sex dates at school formals and parties associated with school formals. School management would be agreeable to answer your enquiries, however we ask if you would first advise the reason for your enquiry and the purpose for which you require the information.”

Roger File from Golden Bay High School: “I would be more than happy to provide that information, without an OIA request, but would like to know what you intend doing with it?”

Sandy Begg from Green Bay High School: “If you wish to have a conversation with me, please contact me on 817 8173 ex 216. I have no idea who your organisation is or who you are.”

Graham Robinson from Hamilton Boys’ High School: “Who do you represent and what is your interest? Are you a former student?” [I thought the former student question was interesting.]

Bruce Hart from Heretaunga College: “Our process around the ball is not a secret and I am quite happy to supply you the information you need.  I didn’t respond as I thought your approach lacked common courtesy. All you need do is introduce yourself properly and ask for the information and I would be more than happy to oblige.”

Ron Ballantyne from Hurunui College: [after asking for a copy of the original email] “It might also be nice to know who you are and why you want this information??”

Rosey Mabin from Inglewood High School: “Thank you for both your emails. I do not provide information to people I don’t know. Neither of your emails tells me who you are and for what purpose you require the information. Perhaps you might be courteous to provide that detail.”

My response: “This is for a personal blog post.”

Rosey: “1.      Perhaps I could use the same Act to get you to disclose more information about yourself? You seem particularly cagey in being transparent about your request, yet expect that in return from the respondents.
2.      It is polite to give some background information when requesting information from strangers. You might like to consider doing so in future.
3.      The job of principals is to lead teaching and learning in their schools. Responding to your sort of request is not an effective use of our time.” [response to questions was below this]

Nadia Rose from James Hargest College: “Please send your request to the school in a hard copy with a physical address and we will respond in hard copy to your physical address.”

My response: “Under the Official Information Act, requests aren’t required to be in written/hard copy form. Is there any particular reason why you’d like the request as a hard copy?”

Nadia: [response to questions]

Harold Leask from John Paul II High School: “I do not share such information with unidentified personal. You have provided no information about yourself or your organisation but I’m happy to discuss this issue with the ombudsman.”

Katherine-Mary Molloy from Kaikorai Valley College: “Who are you and under what authority do you ask for this information.”

Debby Peebles from Kaitaia Abundant Life School: “My Principal would like you to send you  request in writing, on letterhead, with the official organisation that you  belong too.”

Tracy O’Brien from Kavanagh College:  “As a matter of policy  the College does not respond to this type of official request via email.  If you could please land mail your request to The Board Chair, Kavanagh College, 340 Rattray St, PO Box 737, Dunedin 9054 this matter will be responded to as soon as possible.  As a matter of courtesy the Board would expect you to identify yourself or the organisation you represent and your interest in this matter.  As N.Z school policies are a matter of public record I do not expect any difficulty in this information being released to you as soon as practicable.”

Kaye Saywell from Makoura College: “The Principal has requested that you please advise who you are and why you want this information.

How did you send your original request – was it by email or post?  I receive the emails addressed to the College office and open the mail addressed to the Principal and have no record of receiving your original request.”

Dee Whitby from Michael Park School: “We are surprised at the tone of your communication and respectfully point out that your initial request does not request the information as per the Official Information Act [the OIA was mentioned in the subject line, and requests for information should be considered under the OIA whether it is mentioned or not. Regardless, the email should have been replied to mentioning the OIA or not] and it is not yet 20 working days. We frequently receive requests for information and given the busy environment of school life we endeavour to respond as soon as we are able.   We also appreciate receiving more information from the sender.” [response to questions was below this]

John Russell from Naenae College: “Please identify yourself and your purposes”

Barbara Hewitt from Napier Girls’ High School: “Our Principal has requested me to find out who the information is for.”

Jenny Ellis from New Plymouth Girls’ High School: “I am happy to consider responding to your request on receipt of a letter from you that provides details of your business, where you can be contacted and how you intend using the information provided. Our school address is: Private Bag 2049, New Plymouth”

Carolyn Matthews from Otahuhu College: “Your enquiry needs to be in writing and addressed to the Principal.  Please allow 20 working days for a response.”

Grant from Paeroa College: “Who are you and why do you want this information?”

Marie Gordon from Palmerston North Girls’ High School: “I am sorry but I have no idea who you are or who you represent.  Any request for information such as this can be done so in writing with suitable identification.” [Does she want a scan of my driver licence? I’m not sure.]

My response: “[what the information is for]

The Official Information Act doesn’t require requests to be in writing, so this email request should be fine. Additionally, there is no requirement for identification to be provided with requests.”

Marie: “I am well aware of the OIA….thank you. I am not in the habit of responding to random e-mails….however, as the answers are quite simple…” [response to questions was below this]

David Matthews from Papakura High School: “I am not willing to provide you with the information you have requested without some more information from you. Who are you? What will the information be used for?”

Vaughan Couillault from Papatoetoe High School: “Feel free to give me a call.”

Wayne Wright from Reefton Area School: “Put the request in writing, sign it and post it. We do not deal with official information through electronic networks. Our physical address is 10 Victory Street Reefton 7830”

My response: “Under the Official Information Act, requests aren’t required to be in written/hard copy form. The information requested shouldn’t contain any sensitive information that could be compromised by being sent over email.”

[what the information is for]

Wayne: [response to questions] ‘I don’t know why you choose to use the “Official Information Act” line. I know some schools are pretty guarded about their activities, however in our case we are very busy people trying to make good things happen for our students. If something is not going to directly affect our kids, we don’t usually do it. As for having things in writing. Your electronic signature doesn’t cut the mustard for us [I didn’t send in a physical signature, so I guess it did], that’s our choice and that is highly appropriate for our setting.’

David Ormandy from Rodney College: “I am more than happy to answer your questions but could you please give me some information about yourself and the purpose of your request.”

Jai Kreyl from Rotorua Girls’ High School: “It is not clear from your email who you represent.  Please provide more information before I forward your e-mail.”

Helen Fouhy from Sacred Heart College (Napier): “Before I answer any questions I would like to know who a little about you including who you represent, what invested interest you have and what will happen to any information you gather.

Answering emails from an unexplained source is not usually something I would do.”

And Shona Warrington from Sacred Heart College (Napier): “If you would like to pursue this any further, please phone Helen Fouhy to make an appointment to see her to discuss this further.”

Rose Sawaya from Sacred Heart Girls’ College (N Plymouth): “I was not impressed by the follow up version with the threat of the Ombudsman.  Nowhere in your correspondence have you explained who you are or what you want the information for.  If you are going to impose threats of this nature you should at least explain yourself.”

‘Southland Girls High School’ from Southland Girls’ High School: “With regard to your request below, we would politely point out that threats are not ever appreciated [underlining theirs], certainly when a courteous reminder would more than likely extract the same information.”

and

Deb Hay from Southland Girls High School: “The principal would like to know the reason for your request, and in what capacity you are asking?”

Mandy Page from St Catherines College (Kilbirnie): “Could you please send a paper copy of your request to

Jane Holloway
Principal
St Catherine’s College
POBox 14076
Kilbirnie
Wellington

Please enclose an address for reply mail”

My response: “Under the Official Information Act, requests aren’t required to be in written/hard copy form. Is there any particular reason why you’d like me to mail the request?

Mandy: “Yes I would like it in writing please, just to make it a formal request. That way we have your signature on the letter in case the BOT want to see any correspondence”

My response: “The Act accepts emailed requests as valid formal requests.”

Mandy: “Yes and it also states that requests are best made in writing and I am requesting this by written letter rather than email. Thank you.

  • Requests are best made in writing, but you can ask for the information in person or by telephone too; and
  • Keep a note of when, how and who you made your request to (and keep a copy of any requests made in writing).”

[The Department of Justice, where the above was quoted from, says requests are best made in writing likely so the information being requested is clear, not because they want people to cut down trees and sign in pen.]

Neal Swindells from St John’s College (Hastings): “I am not prepared to give out information unless I know who I am giving it to. I require a hard copy letter on the letterhead of the organisation who is asking for this information.”

Erik Pedersen (via Val) from St Matthew’s Collegiate (Masterton): “Suggest you ring. 06 370 1731
I will respond”

Philip Keenan from Stratford High School: “I have acouple of queries:
Why do you want this information and who are you?”

Gina Mason from Taihape Area School: “Could you please let me know who you are, who you are working for and the purpose for your questions.”

Hayley Hodson from Tamatea High School: “I sent you a reply the same day that I received your information request [I never received it, quote below suggests it might not have been sent to me] and asked that you please explain where you are from (what company/business) and for what purpose you are gathering this information.”

From: Nicola Ngarewa [principal]
Sent: Tuesday, 28 June 2011 3:02 p.m.
To: Hayley Hodson
Subject: RE: Official Information Act Request – School Ball/Formal Follow-up

Kia ora ra,

 

I was unsure as the purpose and intent of this email and mistakingly deleted it.

Answers as requested below

Alan Jay Mokoro Gillett from Te Wharekura o Te Rau Aroha: “I am a little reluctant to respond to this email – I am not too sure who you are?  Are you from the Ministry of Education?  I am ready to send this information to the Hamilton branch to follow up. You do not have any contact details – and this could be a hoax email.  So I would prefer that you send me an explanation of who you are, and a phone number, so that I can discuss this issue with you, cordially.”

Hinematua Gillett [same person?]: “Thank you for sending me details regarding your process, but I am not sure whether you are an appropriate person for me to communicate with.  My school is a Kura Aho Matua Wharekura, why should I provide you with information regarding our policies?  I have not been instructed by the Council to do this.  Please explain why I should provide you with these details, otherwise I will not be able to.”

‘Office’ from TKKM o Ngati Kahungunu Ki Heretaunga: “KO WAI KOE ???” [Another school replied to the whole request in Māori, which wasn’t helpful.]

Chris England from Tongariro School: “However so I can provide you with information that more fully answers your needs, could you please give me a little bit of background as to why you require the information, and how it is to be used?”

Kristine Mclachlan from Waimate High School: “Before I answer any questions on behalf of my school I would like you to know that we have not recieved any Official Information Request. We do not respond to threats made and I would like more information about why these questions are being asked. Who are you representing and what do you need the information for?”

Alison Gernhoefer from Westlake Girls’ High School: “I have no difficulty with the information that you require, but I would like to know your credentials and what organisation you represent please.”

Debra Ronke from Woodford House: “We did not reply to your email as you did not introduce yourself or indicate in any way why you wanted the information.  I assumed that the email was spam and deleted it.  I certainly do not reply to random emails without more information. We would be happy to assist you with your information; however, it would be appropriate if you could explain who you are and what organisation you are from.  You are welcome to call me on the number listed below”

Gatekeepers

Correspondence between administration staff and senior management was occasionally forwarded on to me with replies. This correspondence often showed a lack of understanding around the Official Information Act. Here’s an example from Aurora College:

From: Annette Little
Sent: Thursday, 16 June 2011 12:41 p.m.
To: Robyn Hickman
Subject: FW: Official Information Act Request – School Ball/Formal

 

Not sure about this one Robyn – delete if you want to.

Annette

Costs

St Patrick’s College (Silverstream), [correction: not the St Patrick’s that started this], was the only school that requested costs to process the request. Because of the simple nature of the request, no other school asking for costs and their unwillingness to break down the costs for me it seems like they are trying to be difficult and hope that I will lose interest in the request, instead of asking for money because processing the request will cost them money.

Chrissy Fage from St Patrick’s College (Silverstream): “Their is an administration charge of $25 for the secreterial work required in answering this request. On receipt of this cheque, made payable to St Patrick’s College Board of Trustees we will respond to your request.”

Some schools liked making stuff up about the OIA

Denis Slowley from Bayfield High School: “Please note all Official Information Act Requests must be in writing [email is fine] quoting the date of the Act [the Act doesn’t need to be mentioned at all], the purpose of your request [reasons aren’t required] and the specific policies by name [questions are fine]. Such requests cannot be in the form of a fishing question as this one is [see below]” [response to questions was below this]

The Ombudsman explains “fishing expeditions” (pdf) (mirror):

“The fact that a request is for a large amount of information does not of itself mean that the request lacks due particularity. The term “fishing expedition” appears to have received general recognition in the vocabulary of those concerned with making decisions on requests for information. It should be clearly understood that this term is not recognised in the Act as a withholding reason. If the information requested meets the test of due particularity it cannot be refused simply on the basis that it is considered to be a fishing expedition. The request must be given proper consideration under the Act.”

Tim O’Connor from Palmerston North Boys’ High School: “If you want information from anyone I suggest you write specific requests rather than generic ones that are sent out randomly hoping for responses.  You are welcome to complain the Ombudsman and I welcome a response as there are protocols around OIA requests [send in a question?] and you didn’t meet them in your initial e mail.  I can’t say I find your approach amiable or holding any pertinance.” [response to questions was below this]

Copyright

David Olivier from St Peter’s College (Palmerston North): “A Reminder about the Procedure remaining the intellectual property of the College and not for reproduction for purposes other than laid out under the Official Information Act.”

This is an interesting statement.

Considering anyone could request the same document from St Peter’s College, I’m going to link to it here (pdf).

Who are you working for??//@@

Terehia Channings from Turakina Māori Girls’ College: “Firstly, please be informed that we have never at any time received an e-mail from you regarding school balls/formals etc…If you insist that you have, then please forward a copy of that e-mail that you sent. All e-mail that are sent to the office e-mail address are received by my PA and she does not recall receiving any such material. Upon receipt of a copy of your e-mail supposedly sent on the 15th June, I will then respond to your Official Information Act Request.”

From: TMGC Office [mailto:office [at] tmgc.school.nz]
Sent: Tuesday, 28 June 2011 4:31 p.m.
To: Terehia
Subject: FW: Official Information Act Request – School Ball/Formal Follow-up

 

This is the first time I have seen this email??

My response: “Thanks for your reply. The message was possibly intercepted by a spam filter on your end. I could send you a screenshot of the mail merge screen where it says that it sent okay, but that could of course be forged, you seem suspicious of whether I sent the original email. It seems a moot point to debate whether you received the email or not.”

Terehia: “Of course I am going to challenge your e-mail to us as a school due to the fact that you state that you have not received a response from us from your first e-mail, which we did not receive. Secondly, you point out that you can complain to the Ombudsmen if I don’t reply within twenty working days to this e-mail. Please refrain from insinuating that we do not fulfil our legal obligations as a school or myself, as a Principal. I do not appreciate such a demand [replying to three questions!!] being placed on us as school when we did not receive your e-mail on the 15th June. As you know, emails sent can be tracked. We have not found anything that has come from you on the 15th June. Your response to my e-mail would have been acceptable had you just concluded by ending your comments with the mail merge screen declaring that the message was sent. To continue by accusing me of being suspicious [the word supposedly was mentioned] and making the comment of a “moot point to debate” I find offensive. Please send me details of your Manager or Manageress as I would like to take this further. We will respond to the Official Information Act Request at our earliest convenience. I am aware of the timeframe.”

My response: “This is for a personal blog post, I’m not working under a manager.”

Terehia: “Please explain then why we are obligated as a school to complete the survey for a personal blog post. Please forward the documentation that clearly states our obligation as a school.”

My response: “Because of the Official Information Act.”

Terehia: “Please send me the contact details of another person, preferably in a Management position, that I can speak to with regards to your e-mails and the Official Information Act. I just find your approach and manner somewhat rude and disrespectful. I do not believe that you will be the only person collating this information from schools in the country and surely there is a person, a committee or a cluster that you are responsible to.”

My response: “Please forward my request to your Board of Trustee’s chair as the Act applies to the Board.”

Terehia: “That’s fine, I can do that however; I would still like to speak to someone that also collates this information from schools. A person in Management will be great.”

My response: “It really is just me.”

Terehia: “There is no-one that you are responsible to?”

My response: “No”

Terehia: “Indeed!”

I get banned from emailing a school

Jenny Gellen from Waitara High School: “In future, please don’t conact me regarding such matters”

I replied with “Sorry?”, but never got a response from Jenny.

Being difficult/a dick

Rob Sturch from Hastings Boys’ High school: [I thought this deserved a screenshot]

Hastings Boys' High School OIA reply

Alan Liddle from Te Puke High School: “Thank you for your enquiry.  Our policies are available to the public on our website www.tepuke.school.nz” [response to same-sex question below]

My response: “Thanks for your reply. What is your policy on after/before ball parties?”

Alan: “As mentioned in my previous email our policies are on our website.  Help yourself.”

My response: “I searched the site for ball policy, with no results.”

Alan: “Well done and therefore your conclusion will be…

Sent from my iPhone”

Do not question Wellington High School!!@@

Dominic Killalea from Wellington High School: “I have been forwarded your email requesting information from us. I find your tone aggressive and rude. I’m not sure if that’s how you want to appear. By my reckoning, this is the 9th working day since your request.” [response to questions was below this] and

Two days later, Prue Kelly from Wellington High School: “[response to questions]

Why don’t you research something that is educationally significant”

My response: ‘The Human Rights Commission receives “a number of complaints every year about pupils not being allowed to bring same-sex partners to school balls.”

You might not think something that is effectively homophobia is a very important issue, but I do.’

Prue: “If you knew anything about us you would know that we began the schools out programme”

One day later, Cathy Drummond forwarded Prue’s response to me again.

WORD YOUR QUESTION BETTER!!@@

Rod Harris from Christian Renewal School: “The reason why I did not respond is that we do not have a school ball.

Your request is that If  [bolding, italicizing, underlining his] you hold a school ball or formal, could you please answer the following questions? The implication is clear that I only needed to respond if we held a school ball. [The question was worded poorly, but I think most organizations reply to emails to confirm they received them, unless they’re purposely ignoring them.]

To have an expectation for me to respond (as the threat of complaint to the ombudsman) makes the assumption that we do hold a ball. Because as a teaching Principal, I have little time for administration, and having the proliferation of e-mails that come into my e-mail from all different types of sources, I do not respond to e-mails unless I have to.

Next time could you please ensure that you phrase your question accurately to solicit the response that you require.”

Tina Johnson from Murchinson Area School: “We don’t hold a school ball – might of course be why we didn’t answer your questions?”

Earthquake guilt trip

Jan Croft or Sue Hume from Avonside Girls’ High: [I’m assuming Sue Hume is the principal who wrote it and Jan forwarded it on] “I would like you to understand that we are rather busy just now.

We are living in the midst of earthquakes. Our school is badly damaged.

Our girls travel across the city to learn at another school.

We are working really hard to re-establish our school in our community for next year. There are many, many difficulties and challenges.

School formals and after parties are not what is at the forefront of our minds.

From my understanding, there are a number of working days left for me to respond to your request.

A more conciliatory and appreciative tone might be more likely to elicit the response that you seek.”

[response to questions was below]

 

More soon.

Image credit: Niv Singer

“Where would your government be without child porn?”

If it didn’t exist, the government would surely invent it.

Because it’s a great excuse for an internet censorship machine.

This isn’t a debate about whether child sex abuse is right or wrong. You know it’s wrong, I know it’s wrong, we all know it’s wrong. This is a debate about censorship.

Censorship causes blindness

New Zealand has an internet blacklist. A list of content that, if your internet service provider has decided to be part of the filtering project, you can’t access. Images of child sexual abuse are meant to be the only stuff blocked, but the list is secret, censorship decisions happen in private and if international experience is anything to go by, other content has a habit of turning up blacklisted.

What the filter is

Its full name is the Digital Child Exploitation Filtering System. It’s run by the Department of Internal Affairs. It’s powered by NetClean’s WhiteBox, which was supplied by Watchdog Internationalwhich provides filtered Internet access for families, schools and businesses”.

The DIA say that they’re contractually constrained to only use the filter to block child sexual abuse material.

They say that:

“The filtering system is also a tool to raise the public’s awareness of this type of offending and the harm caused to victims. The Group agreed that this particular aspect of the filter needs to be more clearly conveyed to the public.”

So basically, it’s to make it seem like they’re doing something, because it doesn’t actually prevent people from accessing child sex abuse images.

The list is maintained by three people (pdf) (mirror), and sometimes there is a backlog of sites to investigate: “The Group was advised that the filter list comprises approximately 500 websites, with several thousand more yet to be examined.”

How it works

A list of objectionable sites is maintained by the Department. If someone using an ISP that’s participating in the filter tries to access an IP address on the filter list, they’ll be directed to the Department’s system. The full URL will then be checked against the filtering list. If the URL has been filtered, users end up at this page. The user can appeal for the site to be unfiltered, but no appeals have been successful yet (and some of the things people have typed into the appeal form are actually quite disturbing).

Is my internet being filtered?

The internet of 2.2 million ISP clients is being filtered.

It’s voluntary for ISPs to participate in because it wasn’t introduced through legislation, however big ISPs are participating:

  • Telecom
  • TelstraClear
  • Vodafone
  • 2degrees

Others are:

  • Airnet
  • Maxnet
  • Watchdog
  • Xtreme Networks

I assume, for the ISPs providing a mobile data service, the filter is being applied there too.

Why the filter is stupid

Child pornography is not something someone stumbles upon on the internet. Ask anyone who has used the internet whether they have innocently stumbled upon it. They won’t have.

It’s easy to get around. The filter doesn’t target protocols other than HTTP. Email, P2P, newsgroups, FTP, IRC, instant messaging and basic HTTPS encryption all go straight past the filter, regardless of content. Here’s NetClean’s brochure on WhiteBox (pdf), and another (pdf). Slightly more technical, but still basic tools like TOR also punch holes in the filter. The filter is not stopping anyone who actually wants to view this kind of material.

A much more effective use of time and money is to try to get the sites removed from the internet, or you know, track down the people sharing the material. Attempts to remove child sex abuse material from web hosts will be supported by a large majority of hosts and overseas law enforcement offices.

It is clear that the DIA don’t do this regularly. They’re more concerned with creating a list of URLs.

From the Independent Reference Group’s December 2011 report:

“Additionally 18% of the users originated from search engines such as google images.”

Google would take down child sex abuse images from search results extremely fast if they were made aware of them. And it is actually extremely irresponsible for the DIA not to report those images to Google.

Update: The DIA say they used Google Images as an example, and that they do let Google know about content they are linking to.

“The CleanFeed [the DIA uses NetClean, not Cleanfeed] design is intended to be extremely precise in what it blocks, but to keep costs under control this has been achieved by treating some traffic specially. This special treatment can be detected by end users and this means that the system can be used as an oracle to efficiently locate illegal websites. This runs counter to its high level policy objectives.” Richard Clayton, Failures in a Hybrid Content Blocking System (pdf).

It might be possible to use the filter to determine a list of blocked sites, thus making the filter a directory or oracle for child sex content (however, it’s unlikely people interested in this sort of content actually need a list). Theoretically one could scan IP addresses of a web hosting service with a reputation for hosting illegal material (the IWF have said that 25% of all websites on their list are located in Russia, so a Russian web host could be a good try). Responses from that scan could give up IP addresses being intercepted by the filter. Using a reverse lookup directory, domain names could be discovered that are being directed through the filter. However, a domain doesn’t have to contain only offending content to be sent through the DIA’s system. Work may be needed to drill down to the actual offending content on the site. But this would substantially reduce the effort of locating offending content.

Child sex abuse sites could identify DIA access to sites and provide innocuous images to the DIA and child sex abuse images to everyone else. It is possible that this approach is already happening overseas. The Internet Watch Foundation who run the UK’s list say in their 2010 annual report that “88.7%­ of all­ reports­ allegedly­ concerned­ child­ sexual abuse­ content­ and­ 34.4%­ were­ confirmed­ as such­ by­ our­ analysts”.

Someone could just use an ISP not participating in the filter. However people searching for this content likely know they can be traced and will likely be using proxies etc. anyway. Using proxies means they could access filtered sites through an ISP participating in the filter as well.

It is hard (practically, and mentally) for three people to keep on top of child sex abuse sites that, one would assume, change locations at a frequent pace, while, apparently, reviewing every site on the list monthly.

The filter system becomes a single point of attack for people with bad intentions.

The DIA, in their January 2010 Code of Practice (pdf) even admit that:

  • “The system also will not remove illegal content from its location on the Internet, nor prosecute the creators or intentional consumers of this material.” and that
  • “The risk of inadvertent exposure to child sexual abuse images is low.”

Anonymity

The Code of Practice says:

“6.1          During the course of the filtering process the filtering system will log data related to the website requested, the identity of the ISP that the request was directed from, and the requester’s IP address.
6.2          The system will anonymise the IP address of each person requesting a website on the filtering list and no information enabling the identification of an individual will be stored.”

“6.5          Data shall not be used in support of any investigation or enforcement activity undertaken by the Department.” and that

“5.4          The process for the submission of an appeal shall:
•    be expressed and presented in clear and conspicuous manner;
•    ensure the privacy of the requester is maintained by allowing an appeal to be lodged anonymously.”

Anonymity seems to be a pretty key message throughout the Code of Practice.

However…

In response to an Official Information Act request, the DIA said:

“When a request to access a website on the filtering list is blocked the system retains the IP address of the computer from which the request originated. This information is retained for up to 30 days for system maintenance releases and then deleted.” [emphasis mine]

Update: The DIA says that the IP address is changed to 0.0.0.0 by the system.

The site that people are directed to when they try to access a URL on the blacklist (http://dce.net.nz) is using Google Analytics. The DIA talk the talk about the privacy and anonymity around the filter, but they don’t walk the walk by sending information about New Zealand internet users to Google in the United States. It’s possible this is how the DIA gets the data on device type etc. that they use in their reports. Because anyone can simply visit the site (like me, just now) those statistics wouldn’t be accurate.

DCE filter Google Analytics

From the Independent Reference Group’s August 2011 (pdf) minutes:

“Andrew Bowater asked whether the Censorship Compliance Unit can identify whether a person who is being prosecuted has been blocked by the filtering system. Using the hash value of the filtering system’s blocking page, Inspectors of Publications now check seized computers to see if it has been blocked by the filtering system. The Department has yet to come across an offender that has been blocked by the filter.”

I’m not exactly sure what they mean by hash value, but this would seem to violate the “no information enabling the identification of an individual will be stored” principle.

Update: They are searching for the fingerprint of content displayed by the blocking page. It doesn’t seem like they could match up specific URL requests, just that the computer had visited the blocking page.

And, from the Independent Reference Group’s April 2011 (pdf) minutes:

“For all 4 of the appeals the complainant did not record the URL. This required a search of the logs be carried out to ensure that the site was correctly being blocked.”

Appeals are clearly not anonymous if they can be matched up with sites appellants have attempted to access.

Update: The reviewers look at the URLs blocked shortly before and after the appeal request to work out the URL if it isn’t provided.

9000 URLs!

The DIA earlier reported that there were 7000+ URLs on their blacklist. This dropped to 507 in April 2011, 682 in August 2011, and 415 in December 2011. Those numbers are much closer to the 500 or so URLs on IWF’s blacklist.

Where did these 6500 URLs disappear to (or more accurately, why did they disappear?). What was being erroneously blocked during the trial period, or was 7000 just a nice number to throw around to exaggerate the likelihood of coming across child sex abuse images (though, even with 7k sites, the likelihood still would have been tiny)?

Scope creep

Firstly, we weren’t going to have a filter at all:

‘“We have been following the internet filtering debate in Australia but have no plans to introduce something similar here,” says Communications and IT minister Steven Joyce.

“The technology for internet filtering causes delays for all internet users. And unfortunately those who are determined to get around any filter will find a way to do so. Our view is that educating kids and parents about being safe on the internet is the best way of tackling the problem.”’

Then it was said that:

“The filter will focus solely on websites offering clearly illegal, objectionable images of child sexual abuse.”

and

Keith Manch said the filtering list will not cover e-mail, file sharing or borderline material.” [emphasis mine]

One would assume from “images of child sexual abuse” that they would be, you know, images of children being sexually abused. However, it seems that CGI and drawings (Hentai) have made the list.

From the minutes of the Independent Reference Group’s October 2010 meeting:

“Aware that the inclusion of drawings or computer generated images of child sexual abuse may be considered controversial, officials advised that there are 30 such websites on the filtering list [that number is now higher, 82 as of December 2011]. Nic McCully advised that officials had submitted computer generated images for classification and she considered that only objectionable images were being filtered.”

The arguments around re-victimization kind of fall apart when you’re talking about a drawing.

And from the borderline material file:

“The Group was asked to look at a child model website in Russia. The young girl featured on the site appears in a series of 43 photo galleries that can be viewed for free. Apparently the series started when the girl was approximately 9 years old, with the latest photographs showing her at about 12 years old. The members’ part of the site contains more explicit photos and the ability to make specific requests. While the front page of the website is not objectionable, the Group agreed that the whole purpose of the site is to exploit a child and the site can be added to the filter list.”

Clearly illegal, objectionable images of child sexual abuse? No, but we think it should be filtered so we went and did that.

Dodgy DIA

The DIA was secretive about the filter being introduced in the first place. Their first press release about it was two years after a trial of the system started. I wonder how many of those customers using an ISP participating in the trial knew their internet was being filtered during that time?

The Independent Reference Group is more interesting than independent. Steve O’Brien is a member of the group. He’s the manager of the Censorship Compliance Unit. To illustrate this huge conflict of interest, he is the one who replies to Official Information Act requests about the filter. Because the Censorship Compliance Unit operate it.

The Group was advised that the issue of Steve O’Brien’s membership had been raised in correspondence with the Minister and the Department. Steve O’Brien offered to step down if that was the wish of the Group and offered to leave the room to allow a discussion of the matter. The Group agreed that Steve O’Brien’s continued membership makes sense.” [emphasis mine]

That was the only explanation given. That it makes sense that he is a member. Of the group that is meant to be independent.

Additionally, the DIA seems to have accidentally deleted some reports that they should have been keeping.

From Tech Liberty:

“Last year we used the Official Information Act to ask for copies of the reports that the inspectors [have] used to justify banning the websites on the list. The DIA refused. After we appealed this refusal to the Ombudsman, the DIA then said that those records had been deleted and therefore it was impossible for them to give them to us anyway. The Department has an obligation under the Public Records Act to keep such information.

We complained to the Chief Archivist, who investigated and confirmed that the DIA had deleted public records without permission. He told us that the DIA has promised to do better in the future, but naturally this didn’t help us access the missing records.”

List review

The Code of Practice says:

“4.3    The list will be reviewed monthly, to ensure that it is up to date and that the possibility of false positives is removed. Inspectors of Publications will examine each site to ensure that it continues to meet the criteria for inclusion on the filtering list.”

It’s unlikely this actually happens.

Here’s some statistics of how many URLs have been removed.

December 2011
267 removed

August 2011
0 removed

April 2011
108 removed

It’s impossible that between April and August there were no URLs to remove.

In the Independent Reference Group’s December 2011 report it seemed like the following was included because it happens so rarely:

“The list has been completely reviewed and sites that are no longer accessible or applicable (due to the removal of Child Exploitation Material) have been removed.”

The Independent Reference Group has the power to review sites themselves. But in at least one case, they chose not to:

“Members of the Group were invited to identify any website that they wish to review. They declined to do so at this stage.”

 

The filter isn’t covered by existing law and didn’t pass through Parliament. Appropriate checks and balances have not taken place. The DIA did this on their own.

By law, the Classification Office has to publish its decisions, which they do. The DIA’s filter isn’t covered under any law, and they refuse to release their list. The DIA say that people could use the list to commit crimes, but the people looking for this material will have already found it.

What if the purpose of the filter changes? The DIA introduced it without a law change, the DIA can change it without a law change. What if they say “if ISPs don’t like it, they can opt out of the filter”? How many ISPs will quit?

The only positive is that the filter is opt in for ISPs. Please support the ISPs that aren’t using the filter. Support them when they’re accused of condoning child pornography, and support them when someone in government decides that the filter should be compulsory for all ISPs.

 

Side note: why does all of the software on the DIA’s family protection list, bar one, cost money? There is some excellent, or arguably better, free software available. There’s even a free version of SiteAdvisor, but the DIA link to the paid one. Keep in mind that spying on your kids is creepy. Talk to them, don’t spy. The video for Norton Online Family hilariously and ironically goes from saying “This collaborative approach makes more sense than simply spying on your child’s internet habits [sitting down and talking — which is absolutely correct]” to talking about tracking web sites visited, search history, social networking profiles, chat conversations and then how they can email you all about them. Seriously. Stay away.

Image credit: Andréia Bohner

First Three Strikes Notices & a Centralised Notice System?

First notices

The New Zealand Herald is reporting that the first(?) notices under the new Copyright (Infringing File Sharing) three strikes law have been received by ISPs. They’re from the Recording Industry Association of New Zealand (RIANZ) for songs by Rihanna, Lady Gaga and Taio Cruz.

It would be extremely interesting to know the specifics: what songs were downloaded and what downloading method was used.

Centralised system

The Pirate Bay Street ArtStuff reports that rights holders have been in discussion with ISPs over creating a centralised system to make it easier for ISPs to deal with copyright notices.

Tech Liberty has found two companies, IPSafe and Datacom, that seem to be interested in that centralised system. The letter they received from the Ministry of Economic Development in response to an Official Information Act request is here (pdf).

No word on how a centralised system would ensure the privacy of ISP customers.

Image credit: Jakov Vilović