So how big will this be?

The PSC released:

The Public Service Commission has received the final report on the inquiry into the protection of personal information. …

The inquiry took six months and was complex, involving six agencies, third-party service providers and findings that will impact all of the public service. Some matters will also require referral to other authorities for further consideration.  

“The inquiry’s findings will require a thorough response,” says Ms Baggott.

“The protection of personal information is paramount and it’s important we get the response right.”

The commission intends to release the findings and its response at the end of January.

It is hard to imagine there was no misuse found, considering they need six weeks just to work out a response. The referral to other authorities statement also strongly suggests that the blanket denials have not held up.

It will be fascinating to read the report, once it is released.