No legal professional privilege for Deloitte forensic report in Optus data breach litigation
Optus has lost a bid in the Australian federal court to keep secret a Deloitte...
19 November, 2023
Persevering Progress: Privacy Act ‘Accountability’ Reforms
Earlier this year, we provided an update on the privacy reform proposals related to ‘accountability’...
27 October, 2023
Privacy Act changes … still more thinking to be done?
Changes to the Privacy Act changes have been been flagged in the Australian Government’s response...
10 October, 2023
It depends … some findings from Australia’s Attitude to Privacy Survey
Interested in what Australians think about privacy, use of AI and facial recognition and the...
27 August, 2023
Third party service providers: It’s so much more than the contract
Victoria's privacy watchdog, the Office of the Victorian Information Commissioner (OVIC), released a report into how...
11 August, 2023
Lessons from the HWL Ebsworth Data Breach
The HWL Ebsworth data breach has sent shivers down the spine of every professional consulting...
28 July, 2023
The AFP in trouble again for its use of AI … with no privacy impact assessment
The OAIC are again investigating the Australian Federal Police over AI surveillance concerns, this time...
27 July, 2023
Australia’s AI regulation discussion paper: Late to the party again …
Regulating AI has been on the agenda globally for some time, amid growing concern over...
24 July, 2023
Emerging Privacy Enhancing Technologies: A Summary of the OECD 2023 PET Report
The Organisation for Economic Co-operation and Development (OECD) published a report on privacy enhancing technologies...
12 June, 2023
Key Themes from Recent Spam Penalties by ACMA
Sending unsolicited emails, or spam, can not only damage your organisation’s reputation but also land...
19 May, 2023
A new OAIC or back to the future?
This month the Commonwealth Attorney-General, Mark Dreyfus, announced that a stand-alone Australian Privacy Commissioner will...
16 May, 2023
3 Steps to Safeguard Privacy
In the spirit of Privacy Awareness Week 2023, we are sharing 3 tips to safeguard...
07 May, 2023
Organisational Privacy Basics: Privacy Awareness Week 2023
Privacy Awareness Week 2023 runs from May 1 to May 7. To build on this...
28 April, 2023
New Australian Laws Proposed for Direct Marketing, Targeting, & Data Analytics: Privacy Act Review Report Deep Dive Part 3
We’ll continue our deep dive into Australia’s Privacy Act Review report in this article. We...
26 April, 2023
OAIC Data Breach Report: July – December 2022
Key Findings in the OAIC’s Data Breach Report: July – December 2022 The OAIC highlighted the...
03 March, 2023
ISO 31700: New ISO Standard for Privacy by Design
ISO is set to launch a new privacy standard in February: ISO 31700 Privacy by...
24 January, 2023
Buying yourself online – an introduction to privacy issues with online DNA testing
A free online webinar on February 8th 2023 by Dr Andelka M. Phillips - Senior...
21 December, 2022
Electronic Surveillance Reform in Australia: What can we expect next?
Australia’s regulation of electronic surveillance has been a mess for some time. When it announced...
18 December, 2022
CPRA: New privacy obligations in California to take effect from 1 January 2023
The CPRA (California Privacy Rights Act) is set to change the face of privacy in...
24 November, 2022
New ISO 27001:2022 released – Finally!
Hot off the press - ISO 27001:2022 has been published! The much-anticipated update to ISO 27001:2013...
01 November, 2022
Biometrics in Schools and Privacy Issues: What Could Go Wrong?
Biometric technologies have been making their way into schools for years. It's not uncommon for...
28 October, 2022
The Optus Data Breach Communications – A Case Study of What Not to Do in the Wake of a Breach
There has been a great deal of backlash in the wake of the Optus data...
05 October, 2022
Optus Data Breach: Time for change?
The Optus data breach has exposed how harmful a cyber incident can be. Many are...
05 October, 2022
Optus data breach – Listen to Dr Jodie Siganto on ABC Radio
Dr Jodie Siganto was one of the privacy and security experts interviewed by the ABC...
27 September, 2022
OAIC Determinations: A slice and dice of the data
The Privacy 108 team has reviewed OAIC determinations published since 1 November 2010 and identified...
03 July, 2022
More surveillance powers for Australian law enforcement
Australian federal law enforcement agencies can now alter online data and take over on-line accounts....
09 September, 2021
The end to ASIC v RI Advice: Cyber security take-aways for Australian organisations
In early May 2022, the Australian Federal Court released its judgement in the long-running ASIC...
06 May, 2022
Flight Centre’s Design Jam Data Breach: What can we learn?
Flight Centre, Australia’s largest travel agency suffered a data breach affecting nearly 7,000 customers, as...
16 February, 2021
EU’s New Deal for Consumers: a dark future for dark patterns
Laws banning dark patterns, hidden advertising, and manipulated consumer reviews became effective in the EU...
24 June, 2022
Privacy: Building the Foundation of Trust
"Distrust is now society’s default emotion”. This is the no. 1 Takeaway from the 2022...
05 May, 2022
Project REDSPICE: Looking into Australia’s $10b Investment in Cyber Security
Many privacy and cyber security professionals across Australia were surprised by the $9.9 billion earmarked...
28 April, 2022
Update to ISO 27002
Finally, ISO 27002 has been updated! The information security management standard ISO 27001 and its code...
11 March, 2022
Red Cross Data Breach Exposes Personal Information from the World’s Most Vulnerable
On January 19, the International Committee of the Red Cross (ICRC) published a press release...
18 February, 2022
Cambridge Analytica Scandal Fallout: Facebook Appeal Dismissed by Australia’s Federal Court
Late last month, in our coverage of the largest GDPR fines in 2021, we outlined...
10 February, 2022
Google Analytics and GDPR: A win for privacy activists
The recent decision around the use of Google Analytics underlines the continuing battles between EU...
24 January, 2022
CLOUD Agreement eases law enforcement access to big tech data
On December 15, 2021, the United States and Australia signed an agreement to make it...
19 December, 2021
Should small businesses be exempt from the Privacy Act?
In October 2021, the Australian Attorney-General's Department issued a discussion paper seeking further submissions on...
30 November, 2021
Ransomware Action Plan: Another new cyber security law for Australia?
In mid-October 2021, Australia’s new Ransomware Action Plan was released by the Department of Home...
02 November, 2021
ISO 27002 is getting updated, finally!
More than eight years since its last face-lift, ISO 27002 is under review with a...
04 October, 2021
Sanderling return to Moreton Bay
We promised to keep you updated on the adventures of our Sanderling, the shorebird we...
29 September, 2021
Australia’s Response to The Uber Privacy Breach: Fallout from Uber Paying Hackers to Conceal a Massive Data Breach
In July 2021, the Australian Privacy Commissioner issued a determination relating to Uber’s well publicised...
28 September, 2021
China’s new Personal Information Privacy Law: Yet another piece in a complex puzzle
Another piece is added to the jigsaw of China’s privacy and security laws. The Personal...
25 August, 2021
Moreton Bay, Shorebirds and Surveillance
Privacy 108 is a Moreton Bay Foundation Ambassador and delighted sponsor of a Sanderling, one...
23 August, 2021
Is cyber security regulation possible in Australia?
On 13 July 2021, the Australian Government through the Department of Home Affairs (DHA) opened consultation...
05 August, 2021
Google’s Free Choice Screen for Android Users: Increased Consumer Choice Trend Continues
Google’s search engine has dominated the market for the better part of two decades. This...
28 July, 2021
China’s new Data Security Law (DSL): Another piece in a complex puzzle
China has released a new Data Security Law that adds to the existing web of...
08 July, 2021
Welcome to our New Team Member
A very warm welcome to Alicia, the newest member of the Privacy 108 team! An incredible...
30 June, 2021
Reducing Privacy Risk As You Grow: Business Lessons from the Services NSW Data Breach
Last year, Services NSW suffered data breaches that exposed the personal information of more than...
28 May, 2021
Privacy funding in the 2021 Australian Federal Budget
Was privacy a winner in the 2021 Federal budget? Not really …. Unless you think...
23 May, 2021
World-First Enforcement in ACCC v Google: Here’s What You Need To Know
The ACCC has successfully argued that Google engaged in misleading and deceptive conduct in a world-first enforcement proceeding....
22 May, 2021
Make Privacy A Priority: Privacy Awareness Week in 2021
Privacy Awareness Week (PAW) takes place in the first week of May each year. This...
01 May, 2021
Australia’s first cyber security case? ASIC v RI Advice
ASIC's action against RI Advice Group might be Australia's first cyber security case. On 21 August...
11 March, 2021
Draft UK Adequacy Decisions – Things are looking up for EU-UK data transfers
The EU Commission’s draft opinion favours recognising UK as an adequate jurisdiction for data transfers,...
22 February, 2021
Privacy 108 Responds to Privacy Act Issues Paper
In November 2020, the Australian Federal Government commenced its latest review of the Privacy Act...
31 January, 2021
OAIC vs ACCC: Who’s leading the fight for data protection?
What can we learn from the HealthEngine case? Is the ACCC taking over from the...
09 November, 2020
OAIC Determinations 2020: What can we learn?
The OAIC has been busy, releasing eight Determinations between June and September 2020[1]. Given this...
11 October, 2020
How much for using the wrong email address?
A recent determination from the OAIC (Office of the Australian Information Commissioner) sheds a little...
24 September, 2020
Privacy 108 is hiring. Apply now!
Privacy 108 Consulting is expanding. We are looking for junior and senior privacy consultants (part...
04 August, 2020
PrivacyConnect Melbourne Expert Panel – July 15 2020
OneTrust is hosting an online PrivacyConnect Melbourne event on July 15, 2020. Dr Jodie Siganto is...
02 July, 2020
NZ gets a new privacy law … but has it gone far enough?
On 26 June 2020, the NZ Parliament passed a bill reforming the nation's privacy law,...
02 July, 2020
Privacy and Australia’s COVIDSafe App
How does Australia’s COVIDSafe App stack up from a privacy perspective? Introduction For most, the exit strategy...
18 June, 2020