Most Recent
CBA hit with $7.5M penalty for breaching spam laws
Commonwealth Bank has paid a $7.5 million penalty after an ACMA investigation found it sent over 170 million emails that violated spam laws. 
1 or 21M: Australian Clinical Labs wants court’s take on OAIC’s data breach maths
Australian Clinical Labs, which is facing regulatory action over a 2022 data breach, is fighting the information commissioner's claim that it breached privacy laws 21.5 million times.
Worker who criticised ATO on LinkedIn post was not terminated: FWC
An ATO employee who claimed he was bullied after criticising the regulator's data management practices in a LinkedIn comment resigned of his own accord, the Fair Work Commission has found.
Medibank admits lack of multi-factor authentication partly to blame for breach
Medibank has denied breaching privacy rules in response to the regulator's case over a 2022 cyber attack, but has admitted sensitive data was hacked in part because its network lacked multi-factor authentication. 
Cybersecurity ‘fatigue’ sets in despite attack worries: report
Australian companies may be experiencing cybersecurity fatigue, with in-house counsel reporting they believe it will take a cyberattack to improve their focus on data risk management.
Data breach numbers hit three and a half year high, OAIC says
The privacy regulator was alerted to hundreds of data breaches in the first half of 2024, the highest number in three and a half years, a new report shows.
Cybersecurity class actions to increase with latest reforms
Expect more cybersecurity class actions following the introduction of a new statutory tort for serious invasions of privacy, experts on both sides of the bar table told Lawyerly.
Privacy reform kicks off with new tort for ‘serious’ invasions
A promised overhaul of the Privacy Act has begun with reforms that make doxxing a crime and could see businesses face new claims, including class actions, for serious invasions of privacy.
Threat of class actions keeping in-house counsel up at night: report
Corporate Australia is increasingly concerned about class actions, with privacy and data breach claims topping their worry list, according to a new report.
OAIC won’t investigate facial recognition software company Clearview AI again
The OAIC will not investigate Clearview AI further after finding in 2021 that the US-based facial recognition software company breached privacy rules by scraping facial images from the web, but the regulator promised to weigh in soon on when the use of personal information to train AI could run afoul of privacy laws.