ACC doesn't have a strong privacy culture, its policies are outdated and its staff have a narrow view of what privacy breaches are.
Those are just some of the findings in a damning independent report into how client information is managed at the agency.
The review, carried out by lawyer Linda Clark, was commissioned after RNZ revealed last year that some call centre staff shared, and laughed at, clients' injuries on Snapchat, and one client's old sensitive claim was viewed hundreds of times by more than 90 staff.
Here's Anusha Bradley.
