Australian Privacy Jobs Report – Jan to Jun 2023
Privacy 108’s report on privacy jobs advertised in Australia between January and June 2023 is...
04 December, 2023
Privacy 108’s Top 10 Blog Posts for 2022
We've compiled our top ten most-read privacy blog posts for 2022. They're listed below, starting...
20 December, 2022
5 Tips on Passing the CIPT exam
5 practical tips on CIPT exam prep for anyone thinking of taking the exam. Privacy 108...
30 September, 2022
Optus data breach – Listen to Dr Jodie Siganto on ABC Radio
Dr Jodie Siganto was one of the privacy and security experts interviewed by the ABC...
27 September, 2022
The Right to Privacy & Roe v Wade: The Little-Known Link Between Privacy Rights and Abortion Explained
Roe v Wade, the US Supreme Court case which protected the right to abortion for...
23 September, 2022
Voice Recording Laws: Is It Legal to Record a Conversation in Australia?
Australia has a patchwork of state laws that cover listening devices and the surveillance of...
15 September, 2022
Quick Tips for Communicating About Privacy Issues Within Your Organisation
Cookies, aggregated data, dark patterns, and ransomware are just a few of thousands of privacy-related...
08 September, 2022
The Updated CIPP/E Body of Knowledge: What Has Changed
The IAPP’s CIPP/E certification covers key privacy terminology, and the practical considerations relating to personal...
27 August, 2022
Security for privacy practitioners: What security certification suits?
We are often asked by privacy practitioners to recommend security training to help them get...
26 August, 2022
Who Needs to Comply with China’s PIPL?
Organisations are getting used to the extraterritorial scope of privacy laws enacted in other countries,...
20 August, 2022
A Privacy Compliance Tool to Overcome Common Privacy Issues You Need to Avoid
Compliance with Australia’s Privacy Principles is non-negotiable for organisations covered by Australia’s privacy laws (APP...
16 August, 2022
Canada’s Digital Charter Implementation Act 2022 – And What Australia Can Learn From It
Canada appears to be looking to update and strengthen its digital privacy with the introduction...
12 August, 2022
Queensland’s Information Privacy Act review: What’s being considered?
Queensland is updating its Information Privacy and Right to Information Framework, with a consultation paper...
10 August, 2022
The American Data Privacy and Protection Act (ADPPA): What’s happening?
The American Data Privacy and Protection Act (ADPPA) is making its way through the US...
10 August, 2022
PIPL: Proposed China SCCs for Cross Border Transfers
On 30 June 2022, the Cyberspace Administration of China (CAC) released a template agreement for...
05 August, 2022
ISACA CISM Exam Update: What’s Changed
The ISACA updates the content of its curriculum and exams around every five years. The...
29 July, 2022
5 Key Questions Boards Should Ask About Cyber Incidents
The frequency of ransomware attacks is rising, as is the average cost of a privacy...
24 July, 2022
CIPM Body of Knowledge Update: What’s Changed
Privacy is an exciting and dynamic field that is rapidly changing. While this makes it...
23 July, 2022
What is Australia doing about scams? The ACCC’s 3 pronged approach
The Australian Competition and Consumer Commission (ACCC) has proposed a “three-pronged approach” to ensure Australia...
22 July, 2022
Thailand Privacy Law Becomes Operational: 5 Compliance Issues
Thailand enacted its comprehensive privacy law on 28 May 2019. After giving covered organisations three...
14 July, 2022
What Privacy Professionals Need to Know About Dark Patterns Regulation
Dark patterns regulation has emerged as a focus in both the US and EU over...
30 June, 2022
EU’s New Deal for Consumers: a dark future for dark patterns
Laws banning dark patterns, hidden advertising, and manipulated consumer reviews became effective in the EU...
24 June, 2022
Privacy Enforcement in APAC: Privacy Breach Penalties by APAC Regulators
Privacy breaches and enforcement in Europe, the US, and Australia garner much media attention in...
17 June, 2022
Transfer Impact Assessments Under the New SCCs: What You Need to Know
The New SCCs require organisations to undertake a transfer impact assessment before completing a transfer...
10 June, 2022
Australian Privacy Jobs Quarterly Report – March 2022
Privacy 108’s analysis of Australian privacy jobs advertised in March 2022 is now available. Main Findings...
07 June, 2022
How Can I Legally Collect Email Addresses? Practical Methods for Gaining Consent
The penalties for sending unsolicited (or spam) marketing emails in Australia can be severe –...
12 November, 2021
How to Structure Your Privacy Team
We revealed in our December 2021 Privacy Jobs Report that larger organisations are increasingly implementing...
07 June, 2022
5 Tips for Successfully Implementing Privacy by Design
In a world where there’s no cookie cutter template to privacy, companies are hungry for...
30 May, 2022
It’s the GDPR’s 4 Year Anniversary: These are the 4 Biggest Impacts It Has Had on Global Privacy
Europe’s landmark General Data Protection Regulations (GDPR) came into effect (just over) 4 years on...
21 May, 2022
5 IAPP Certification Exam Tips to Help You Prepare (By an IAPP Training Partner)
For any IAPP certification, real-world experience is an advantage – but sitting an exam is...
13 May, 2022
Privacy: Building the Foundation of Trust
"Distrust is now society’s default emotion”. This is the no. 1 Takeaway from the 2022...
05 May, 2022
Project REDSPICE: Looking into Australia’s $10b Investment in Cyber Security
Many privacy and cyber security professionals across Australia were surprised by the $9.9 billion earmarked...
28 April, 2022
Privacy Shield 2.0 is Coming – But is the new EU-US data transfer mechanism here to stay?
The Whitehouse and EU Commission announced the impending arrival of Privacy Shield 2.0 on 25...
13 April, 2022
Changing legal landscape for Data Breach Notification in Australia
With the rise of cyber security incidents and increased concern about ransomware, additional data breach...
11 April, 2022
The new ISO 27002: 2022 – Answers to some Frequently Asked Questions
The new 2022 revision of ISO 27002 was published on February 15, 2022 It’s been eight...
10 April, 2022
What does it take to be a DPO?
The EU General Data Protection Regulation (GDPR) requires certain organisations to appoint a data protection...
29 March, 2022
How to Write a Better Privacy Policy: Best Practices for Privacy Policies
Australia’s Privacy Act 1988 requires APP entities to have a clear and up-to-date privacy policy...
26 March, 2022
The Consequences of Privacy Regulatory Inaction: Some lessons from the EU for Australia
When the GDPR introduced hefty new fines and more stream lined enforcement, many privacy advocates...
24 March, 2022
China’s PIPL: A Guide to What’s Covered
China’s privacy law, the Personal Information Protection Law (PIPL), came into effect on November 1,...
09 March, 2022
De-identification as a Privacy-Enhancing Tool: How, when and why to use it
De-identification is a powerful solution to many of the privacy concerns data sharing and use...
09 March, 2022
Red Cross Data Breach Exposes Personal Information from the World’s Most Vulnerable
On January 19, the International Committee of the Red Cross (ICRC) published a press release...
18 February, 2022
Privacy Program FAQs for Privacy Professionals
As customers become more alert to privacy issues, organisational privacy programs must achieve customer trust...
11 February, 2022
Cambridge Analytica Scandal Fallout: Facebook Appeal Dismissed by Australia’s Federal Court
Late last month, in our coverage of the largest GDPR fines in 2021, we outlined...
10 February, 2022
Australian Privacy Professionals Survey 2021 – Results
Results from our 2021 Privacy Professional Survey are now available. Thank you to everyone who...
31 January, 2022
GDPR Fines in 2021: What can we learn?
EU privacy regulators last year levied fines totalling more than €1 billion for GDPR breaches,...
26 January, 2022
Australia’s Privacy Act Review: Another missed opportunity?
Privacy 108 has submitted its response to the Privacy Act Review Discussion Paper. You can...
25 January, 2022
Google Analytics and GDPR: A win for privacy activists
The recent decision around the use of Google Analytics underlines the continuing battles between EU...
24 January, 2022
Dark Patterns: What are They and Why Should You Remove Them From Your Website?
Facebook and Google have received hefty fines from France’s lead data protection authority, the CNIL,...
20 January, 2022
Australian Privacy Jobs Quarterly Report – December 2021
Privacy 108’s analysis of Australian privacy jobs advertised in December 2021 is now available. Main Findings...
14 January, 2022
Grindr Fined €6.5 million for Breaching GDPR Consent Requirements
Norway’s data privacy watchdog has issued a 6.5 million Euro fine to a location-based social...
07 January, 2022
Re-introducing the Re-identification Offence Bill: The dumbest privacy idea this year?
The Privacy Act Discussion Paper, the latest stage in the comprehensive review of Australia's Privacy ...
29 December, 2021
Privacy-Enhancing Technologies as the Solution to Eroding Trust: Lessons from the World Economic Forum’s Recent Publication on Consumer (Mis)Trust.
The World Economic Forum (WEF) recently released an article about “How to overcome mistrust of...
23 December, 2021
CLOUD Agreement eases law enforcement access to big tech data
On December 15, 2021, the United States and Australia signed an agreement to make it...
19 December, 2021
3 Gamechanging New Year’s Privacy Resolutions for Your Business in 2022
As the new year approaches, it’s time to consider your resolutions for 2022. Business owners...
10 December, 2021
3 New Year’s Resolutions for Budding Privacy Professionals: What you can do to land your dream job in 2022
If you’re looking to make 2022 the year you land your dream job as a...
03 December, 2021
EDPB Data Transfer Guidance: Draft released for consultation
Many Australian organisations have suffered the double whammy of being caught by the extra territorial...
01 December, 2021
Should small businesses be exempt from the Privacy Act?
In October 2021, the Australian Attorney-General's Department issued a discussion paper seeking further submissions on...
30 November, 2021
Australian Privacy Professionals Survey 2021
In 2019 we ran our first Australian Privacy Professionals Survey. Time has flown and the privacy...
26 November, 2021
Privacy as a Competitive Advantage for Australian Businesses: Why should companies care about data privacy?
While not as well-publicised as greenwashing, consumers and regulators are becoming more aware of the...
26 November, 2021
Which CIPP Certification is Right for Me?
The Certified Information Privacy Professional certifications offered by the International Association of Privacy Professionals (IAPP) are...
19 November, 2021
Google Free Choice Screen Closer for Australians
The Australian Competition and Consumer Commission (ACCC) has reiterated its call for Google to implement...
16 November, 2021
Getting Started in Privacy: Privacy career skills employers want to see on your CV
Working out how to get hired in a field that is relatively new and constantly...
15 November, 2021
7-Eleven’s Photo Faux Pas: 3 key privacy compliance take-aways
The recent decision of the Office of the Australian Information Commission (OAIC) about privacy interferences...
10 November, 2021
Ransomware Action Plan: Another new cyber security law for Australia?
In mid-October 2021, Australia’s new Ransomware Action Plan was released by the Department of Home...
02 November, 2021
Australian Privacy Jobs Quarterly Report – September 2021
Privacy 108’s analysis of Australian privacy jobs advertised in September 2021 is now available. Main Findings...
26 October, 2021
The Changing Landscape of Cookie Laws in APAC
How are Cookie laws changing in APAC? We recently covered the move away from the use...
25 October, 2021
Cybersecurity Enforcement in a World Where a Ransomware Attack Led to a Baby’s Death
A US medical malpractice lawsuit (scheduled for trial in November 2022) alleges that a hospital...
14 October, 2021
Sanderling return to Moreton Bay
We promised to keep you updated on the adventures of our Sanderling, the shorebird we...
29 September, 2021
Balancing Data Use and Disclosure with Privacy: Issues Organisations Must Consider
Accessing data for potentially unauthorised purposes has been hitting headlines recently as various state police...
29 September, 2021
Australia’s Response to The Uber Privacy Breach: Fallout from Uber Paying Hackers to Conceal a Massive Data Breach
In July 2021, the Australian Privacy Commissioner issued a determination relating to Uber’s well publicised...
28 September, 2021
What is a Privacy Consultant?
Interested in becoming a privacy consultant? Not sure what experience is required or what you...
28 September, 2021
Practical Tips to Update SCCs at Your Organisation
The repeal of the Old SCCs is just around the corner – on 27 September...
16 September, 2021
Are cookies losing their flavour?
The world of on-line cookies is changing with regulators making their use more difficult, browsers...
10 September, 2021
Increasing cyber security requirements: the latest trend in privacy
If you follow our blog posts, you may have noticed a theme emerging over the...
25 August, 2021
China’s new Personal Information Privacy Law: Yet another piece in a complex puzzle
Another piece is added to the jigsaw of China’s privacy and security laws. The Personal...
25 August, 2021
Moreton Bay, Shorebirds and Surveillance
Privacy 108 is a Moreton Bay Foundation Ambassador and delighted sponsor of a Sanderling, one...
23 August, 2021
Australian Privacy Jobs Quarterly Report – June 2021
Privacy 108’s analysis of Australian privacy jobs advertised in June 2021 is now available. Main Findings...
17 August, 2021
Privacy by Design: A Future-Focused Privacy Approach for Your Organisation
The constantly changing global privacy landscape may seem overwhelming. More jurisdictions are enacting increasingly robust...
06 August, 2021
Is cyber security regulation possible in Australia?
On 13 July 2021, the Australian Government through the Department of Home Affairs (DHA) opened consultation...
05 August, 2021
Mandatory notice of ransomware payments: Is it a good idea?
There is no doubt that ransomware attacks are amongst the most serious cyber threats to...
03 August, 2021
Trends in Privacy Careers: Moving to Greater Flexibility
We have been monitoring privacy careers via privacy jobs advertised in Australia for almost three...
30 July, 2021
Google’s Free Choice Screen for Android Users: Increased Consumer Choice Trend Continues
Google’s search engine has dominated the market for the better part of two decades. This...
28 July, 2021
Privacy Enhancing Technology: Demystifying Privacy Management Solutions
More organisations are looking at automated solutions to support the efficient management of their privacy...
17 July, 2021
China’s new Data Security Law (DSL): Another piece in a complex puzzle
China has released a new Data Security Law that adds to the existing web of...
08 July, 2021
New AI Regulation in the EU: A risk based approach with teeth
Artificial intelligence (AI) is transforming the world in many aspects. Many countries are considering how...
07 July, 2021
Ensuring AI supports Human Rights? Recommendations from the Australian Human Rights Commission
Concerns around bias, discrimination and unfairness dog the use of Artificial Intelligence, not without justification...
06 July, 2021
CIPP/E Update: What you need to know
From July 1, 2021 the CIPP/E body of knowledge and exam will be updated. The changes...
30 June, 2021
Welcome to our New Team Member
A very warm welcome to Alicia, the newest member of the Privacy 108 team! An incredible...
30 June, 2021
Cybersecurity in the ‘Next Normal’: Minimum Standards When Working From Home
The white-collar workforce is likely to look very different long into the future. While some...
25 June, 2021
Ransomware: What can you do?
There’s little doubt that ransomware is a serious risk to businesses globally. The roll call...
21 June, 2021
Privacy Impact Assessments as a Business Tool: Make better decisions with PIAs
Privacy impact assessments are an underutilised tool that organisations can use to enhance data protection...
12 June, 2021
Concluding the Saga? The New SCCs for GDPR-Compliant Third-Party Data Transfers Have Arrived
On 4 June, the European Commission (EC) published its finalised version of the new Standard...
11 June, 2021
Reducing Privacy Risk As You Grow: Business Lessons from the Services NSW Data Breach
Last year, Services NSW suffered data breaches that exposed the personal information of more than...
28 May, 2021
Privacy funding in the 2021 Australian Federal Budget
Was privacy a winner in the 2021 Federal budget? Not really …. Unless you think...
23 May, 2021
World-First Enforcement in ACCC v Google: Here’s What You Need To Know
The ACCC has successfully argued that Google engaged in misleading and deceptive conduct in a world-first enforcement proceeding....
22 May, 2021
Digital Privacy in Australia in 2021: 3 Lessons for Australian Businesses from Global Privacy Laws
Global privacy law is undergoing massive change. Different countries are trying to keep up with...
19 May, 2021
Make Privacy A Priority: Privacy Awareness Week in 2021
Privacy Awareness Week (PAW) takes place in the first week of May each year. This...
01 May, 2021
5 Steps to Ensure Your Privacy Policies are Effective
Our earlier article about Flight Centre’s 2017 privacy breach and OAIC investigation received quite a bit of...
22 April, 2021
Securing health information: What can we learn from the OAIC’s assessment of Healthscope?
In November 2020, the OAIC released its report into Healthscope’s security and privacy processes. According...
29 March, 2021
A Quick Guide to Safely Transferring Files – Digitally
The safety of digital files in transit was recently thrown into the spotlight by the Accellion...
25 March, 2021
A solution to the trans-Atlantic data transfer problem: Cryptoloc provides GDPR supplementary measures
Brisbane based Cryptoloc's innovative encryption process may be the supplementary measure your business needs to...
25 March, 2021
A Privacy Glossary With Key Terms for CIPP/E (Plus a Free Quiz!)
The IAPP's Privacy Glossary contains hundreds of essential terms today's privacy professionals need to know. It's constantly changing and, for those new to the profession, might seem overwhelming. We've created this CIPP/E-specific privacy glossary to help you learn and memorise the key terms for your CIPP/E exam (focusing on EU GDPR specific terms). To solidify your learning, we've included a free quiz with many of the key terms so you can test yourself, plus some other great resources.
20 March, 2021
3 Business Lessons From The OAIC 2020 Highlights
The OAIC 2020 Highlights Infographic gives us plenty of information about the direction of privacy...
12 March, 2021
Australia’s first cyber security case? ASIC v RI Advice
ASIC's action against RI Advice Group might be Australia's first cyber security case. On 21 August...
11 March, 2021
Draft UK Adequacy Decisions – Things are looking up for EU-UK data transfers
The EU Commission’s draft opinion favours recognising UK as an adequate jurisdiction for data transfers,...
22 February, 2021
What’s Up With WhatsApp’s Privacy Policy?
In January, WhatsApp users received a popup outlining that they’d need to agree to the new terms...
19 February, 2021
December 2020 Quarterly Report: Job Trends for Australian Privacy Professionals
Summary of Key Findings in our analysis of job trends for Australian Privacy Professionals: Sydney...
10 February, 2021
Must-Have Skills for Australian Privacy Professionals in 2021
Privacy is experiencing rapid growth around the world. With change looming following the review of the...
06 February, 2021
Privacy 108 Responds to Privacy Act Issues Paper
In November 2020, the Australian Federal Government commenced its latest review of the Privacy Act...
31 January, 2021
GDPR Cross-border Transfers: Draft SCCs and Supplementary Measures
Following the drama of the Schrems II decision, the EDPB has issued new draft SCC’s...
15 December, 2020
Free on-line GDPR Training: Our Top 5 Picks
Interested in GDPR training? We’ve found some of the best FREE on-line resources for you. Selecting...
01 December, 2020
OAIC vs ACCC: Who’s leading the fight for data protection?
What can we learn from the HealthEngine case? Is the ACCC taking over from the...
09 November, 2020
GDPR Foundations and Implementation: 2 day on-line BSI Training Course available now
Want to learn more about the GDPR and how to implement a GDPR compliant privacy...
06 November, 2020
Privacy Jobs in Australia: Signs of post-COVID recovery?
This report outlines trends from our analysis of advertised privacy jobs between December 2018 and...
22 October, 2020
OAIC Determinations 2020: What can we learn?
The OAIC has been busy, releasing eight Determinations between June and September 2020[1]. Given this...
11 October, 2020
How much for using the wrong email address?
A recent determination from the OAIC (Office of the Australian Information Commissioner) sheds a little...
24 September, 2020
What’s in a name? Developing a privacy workforce taxonomy
Our research shows little consistency in titles for advertised privacy jobs in Australia. You can...
02 September, 2020
Australia’s Cyber Security Strategy 2020: What About Privacy?
Most Australian privacy and security practitioners recognise the growing importance of data protection and the...
19 August, 2020
Privacy 108 is hiring. Apply now!
Privacy 108 Consulting is expanding. We are looking for junior and senior privacy consultants (part...
04 August, 2020
Who’s responsible? Employer liability for data breaches
Are employers responsible for their employees' data breaches? A recent decision in the UK might allay...
21 July, 2020
Using Artificial Intelligence to support Privacy Management
A gap between privacy and security means it’s currently harder for organisations to implement a...
20 July, 2020
PrivacyConnect Melbourne Expert Panel – July 15 2020
OneTrust is hosting an online PrivacyConnect Melbourne event on July 15, 2020. Dr Jodie Siganto is...
02 July, 2020
NZ gets a new privacy law … but has it gone far enough?
On 26 June 2020, the NZ Parliament passed a bill reforming the nation's privacy law,...
02 July, 2020
Privacy and Australia’s COVIDSafe App
How does Australia’s COVIDSafe App stack up from a privacy perspective? Introduction For most, the exit strategy...
18 June, 2020
Australian class actions for data breach: A new phenomena?
Given the uncertainty about the right to sue for breach of privacy in Australia, introduction...
25 May, 2020
Test, track and trace: privacy issues for Australian businesses
Test, track and trace is becoming the universal strategy to support a move out of...
18 May, 2020
Getting a privacy gig in Australia
There’s a buzz around privacy and privacy jobs. As privacy trainers and consultants, we are...
24 April, 2020
Do Australian Organisations take privacy seriously?
Privacy concerns outstrip investment A new survey suggests that Australian organisations’ investment in privacy risk and...
16 April, 2020
Cyber vs Privacy jobs: Are we repeating the same mistakes?
Listen to SecureCIO Podcast with Dr Jodie Siganto talking about privacy jobs As a keen observer...
07 April, 2020
Privacy Jobs in Australia: What happened in 2019?
Australian Privacy Jobs Report This report outlines the trends from our analysis of privacy jobs advertised...
24 March, 2020