Peter A Clarke

It is hardly news anymore that health service providers, especially hospitals are key targets for cyber attacks. That is reinforced by an article titled Ransomware group Gunra claims to have exfiltrated 450 million patient records from American Hospital Dubai by removing Read the rest of this entry »

In December 2023 the Queensland Parliament passed the Information Privacy and Other Legislation Amendment Act 2023 (Qld).  Amendments to the Information Privacy Act 2009 (Qld) will come into effect on 1 July 2025.

The most notable reform is the introduction of new Queensland Privacy Principles (QPPs) that replace the existing Information Privacy Principles and the National Privacy Principles.

The most relevant QPPs are  QPP 11, QPP 12 and QPP 13.

• QPP 11 requires agencies to take reasonable steps to protect the personal information they hold from misuse, interference, and loss, and from unauthorised access, modification or disclosure.
• QPP 12 requires agencies to give an individual access to a document in their control, containing the individual’s personal information.
• QPP 13 requires agencies to take reasonable steps to correct the personal information they hold to ensure that, having regard to the purpose for which it is held, it is accurate, up to date, complete, relevant and not misleading.

QPP 11

QPP 11 requires:

• agencies to take reasonable steps to protect the personal information they hold from misuse, interference, and loss, and from unauthorised access, modification or disclosure; and
• agencies to  destroy or de-identify personal information once it is no longer needed for any purpose for which it could be used or disclosed under the QPPs.

The reasonable steps an agency must take to ensure the security of personal information will Read the rest of this entry »

In 7 days Australia will have a stautory tort of serious invasion of privacy.  It is found in Schedule 2 of the Privacy and Other Legislation Amendment Bill 2024.  

The scope of the tort is a matter of conjecture but it is certain to have an impact on corporate governance especially regarding data harvesting, data usage and consent.

In particular it will have Read the rest of this entry »