K and Finance Company [2011] AICmrCN 5 (22 December 2011): Privacy Commissioner determination regarding sections 6 and 18E of Privacy Act

March 15, 2012

In K and Finance Company [2011] AICmrCN 5 the Privacy Commissioner considered the application of section 18E which prohibits a credit provider from listing information on an individual’s credit file unless it has notified the individual that it may disclose their information to a credit reporting agency and section 6 which considers the defintion of serious credit infringement.

FACTS

The complainant advised he/she had signed as guarantor for a loan for a family member. The finance company who provided the loan to the family member subsequently listed a serious credit infringement on the complainant’s consumer credit information file held by a credit reporting agency.

The Commissioner after obtaining a copy of the loan contract Read the rest of this entry »

L and Insurer [2011] AICmrCN 6 (22 December 2011): Determination regarding section 7B(5) of the Privacy Act.

March 14, 2012

In L and Insurer [2011] AICmrCN 6 the Privacy Commissioner considered the operation of section 7B(5) of the Privacy Act, which provides an exemption when acting under a State contract.

FACTS

The complainant lodged workers compensation claims with two current employers. The complainant alleged the insurer handling those claims disclosed details about a third, unrelated workers compensation claim against a previous employer to the solicitors handling the claims for the two current employers.

DECISION

The Commissioner Read the rest of this entry »

M and Law Firm [2011] AICmrCN 7 (22 December 2011): Privacy Commissioner determination and NPP 2

In M and Law Firm [2011] AICmrCN 7 the Privacy Commissioner considered the operation of NPP 2, where NPP 2.1 provides that an organisation must not use or disclose personal information about an individual for a purpose other than the primary purpose of collection with the relevant exception at NPP 2.1(a) which permits the use or disclosure of personal information for a secondary purpose where that purpose is related to the primary purpose of collection, and the individual would reasonably expect the disclosure.

FACTS

A law firm, acting on behalf of the complainant’s former utility service provider, commenced debt recovery action Read the rest of this entry »

N and Law Firm [2011] AICmrCN 8 (22 December 2011): Privacy Commissioner investigation regarding NPP 1.2 and 10

In N and Law Firm [2011] AICmrCN 8 the Privacy Commissioner considered the operation of NPP 1.2, that an organisation must collect personal information only by lawful and fair means and not in an unreasonably intrusive way, and NPP 10.1, requring an organisation not to collect sensitive information about an individual unless one or more of the exceptions at NPP 10.1 applies of which NPP 10.1(e) allows an organisation to collect sensitive information about an individual if the collection is necessary for the establishment, exercise or defence of a legal or equitable claim.

FACTS

The complainant alleged that a law firm interfered  by improperly collecting personal information, including their health information, by using covert film surveillance. This information was subsequently disclosed during court proceedings. The law firm was acting for its client, an insurer, when it collected the complainant’s personal information.

DECISION

While the Commissioner  interprets ‘fair’ in the context of NPP 1.2 as to mean ‘without intimidation or deception’ that usually precludes Read the rest of this entry »

O and Professional Association [2011] AICmrCN 9 (22 December 2011): Privacy Commissioner determination regarding NPP 6.1 and 6.2 of the Privacy Act

In O and Professional Association [2011] AICmrCN 9 the Privacy Commissioner considered the operation of NPP 6.1 , requiring an organisation that holds personal information about an individual to  provide that person with access to that information unless exceptions apply, and NPP 6.2 which provides that an organisation may need not to provide direct access to information that will reveal commercially sensitive decision making processes if it gives an explanation for the commercially sensitive decision.

FACTS

The complainant sought access to a completed and marked exam paper and the associated documents which were used to mark and rate his/her performance along with the application for special consideration and all relevant documentation used in assessment of that application from a professional association. The professional association provided the complainant with a copy of the front page of the exam paper and the multiple choice sheet that contained his/her personal information Read the rest of this entry »

P and Retail Company [2011] AICmrCN 10 (22 December 2011): Privacy Determination relating to NPP 1.1 and 1.2

In P and Retail Company [2011] AICmrCN 10 the Privacy Commissioner considered the operaiton of NPP 1.1,  collecting personal information  necessary for one or more its functions or activities, and NPP 1.2, collect information only by lawful and fair means and not in an unreasonably intrusive way.

FACTS

The complainant alleged that a retail company recorded outbound calls it made  without providing notification that it was recording the calls.  The complainant objected as they had not been notified or asked for their consent to record the calls. The retail company verbally apologised but stated that it had  advised the complainant through an interactive voice response system when the complainant made his/her first inbound call to the retail company. The  retail company’s argument was that the complainant was therefore aware the call was being recorded and consent to the collection of such information could be implied.

DECISION

The retail company outlined that its collection of information via the recording of calls was for training, coaching and monitoring purposes including to process orders and action enquiries. The Commissioner took the view that the collection of the information by recording phone calls was necessary for one of the retail company’s functions and the company had met the requirements of NPP 1.1.

In considering whether the collection was by fair and lawful means, the Commissioner had regard to Read the rest of this entry »

Q and Financial Institution [2011] AICmrCN 11 (22 December 2011); Privacy Commissioner Determination

In  Q and Financial Institution [2011] AICmrCN 11, the Privacy Commissioner considered the operation of the NPP 2.1.

FACTS

The complainant contracted Read the rest of this entry »

Introduction of the Judicial Misbehaviour and Incapacity (Parliamentary Commissions) Bill 2012

The Attorney General introduced the Judicial Misbehaviour and Incapacity (Parliamentary Commissions) Bill 2012 today.  The homepage for the bill is found here.

The Attorney General’s announcement is:

“It is essential that the community continues to have strong confidence in our courts and a transparent and robust complaints process is fundamental to this,” Attorney-General Nicola Roxon said.

“An open and transparent judicial system is Read the rest of this entry »

S and Telecommunication Company [2011] AICmrCN 13

March 8, 2012

The Privacy Commissioner handed down a determination in S and Telecommunication Company late last year.

FACTS

The complainant sought access to his/her personal information held by a telecommunication company.  The complainant believed that included correspondence with a law enforcement agency.  The telcom refused access and relied on NPP 6, the exception which provides that access would prejudice activities of an enforcement body.

ISSUE

The telcom claimed that Read the rest of this entry »

Victorian Privacy Commissioner issues paper regarding the the use of biometric technology

The Victorian Privacy Commissioenr has released an information guide on biometrics.

It is found here. It provides (absent diagrams and with annotations incorporated rather than footnoted):

What is biometric information?

Biometric information refers to Read the rest of this entry »