Organisations need to take effective steps to prevent breaches caused by malicious or criminal attacks – the leading source of breaches notified to the OAIC. This includes training staff and improving cyber security systems and processes. See our report: oaic.gov.au/privacy/notifi…

The Office of the Australian Information Commissioner is reviewing Services Australia access refusal decision for myGov Code Generator app source code. Details of my initial request, decision, internal review application and decision, and link to my IC review application letter at Right To Know : righttoknow.org.au/request/mygov_…

Naww. Look what I just had delivered from my wonderful digital rights fam at EFA is @ aus.social 💜💜💜 Naww. You will make me cry 😢 Thank you @chipswoon for organising xx

Australia sets up 100-strong permanent 'operation' to target hackers itnews.com.au/news/australia…

Today we're appearing at a public hearing for the senate inquiry into the Privacy Legislation Amendment (Enforcement and Other Measures) Bill, alongside other civil society groups, EFA is @ aus.social and Australian Privacy Foundation. More details about the inquiry here: aph.gov.au/Parliamentary_…

This is it in a nutshell - Parliament has required ever more data collection often under the guise of 'national security' and been reckless as to the consequences this would have on people's privacy

Reminder from EFA is @ aus.social that "you can't lose what you don't have" - we need a systemic change from the over collection of data that it's impossible to look after perfectly

Legal and Constitutional Affairs Legislation Committee - Privacy Legislation Amendment (Enforcement and Other Measures) Bill 2022 - 17/11/2022 (Canberra) #Hansard transcript bit.ly/3Ol21EL

Police used encryption powers without rigorous controls. “instances of statutory non-compliance, or, at best, a failure by agencies to demonstrate compliance with key safeguards and requirements” had occurred. innovationaus.com/police-used-en…

Doesn't have to be Optus or Medibank, interested in people's recent conversations with any company holding their data. What did they say? CHOICE

HOT OFF THE PRESS: The Bill to amend the Privacy Act to increase penalties and OAIC powers has now passed both Houses of Parliament, with only one minor clarifying amendment. $50M+ max penalties for breaches of the Australian Privacy Act will commence in the next day or so!

Meta fined $275m after data-scraping fiasco leaked 533m Facebook users' profiles reg.cx/46zF?utm_sourc…

"An ABC investigation has identified large swathes of previously unreported confidential material that is widely available on the internet, ranging from sensitive legal contracts to the login details of individual MyGov accounts" abc.net.au/news/2022-11-2…

This will not change until individuals can seek redress for the harm they suffer when companies fail to adequately protect data they collect about us.

New: A ransomware gang claims to have stolen 375 gigabytes worth of employee and customer data from the Australian real estate giant, LJ Hooker, including passport scans, credit card details, and loans data. LJ Hooker says it's notified relevant agencies. vice.com/en/article/7k8…

We're at the other place @ aus social.