Commonwealth Bank calls for improved cyber security

April 1, 2014

One of the key issues with the interpretation of the Australian Privacy Principles is the extent to which organisations will need to keep up to date with data security protocols, programs and preventative methods to avoid a hacking attack.  The fact that an organisation is hacked does not mean, ipso facto, it has not complied with the APPs.  That said a breach Read the rest of this entry »

The perils of posting kids pics on Facebook, the long term privacy and reputational consequences

March 31, 2014

In 2009 the newly minted President of the United States, President Obama, spoke to some school children and cautioned them about what they put on Facebook.  It is reported by the Huffington Post in Obama On Facebook: “Be Careful What You Post”.

At that time  he said:

“Whatever you do,” he told them, “it will be pulled up later in your life.”

Prescient comments then and  equally applicable today, if not more so with Big Data and sophisticated algorithims. Advice that is not heeded by those who take selfies after sex, as reported in Why are couples taking #aftersex selfies? A spectacularly stupid practice at any age.

In the Age’s article Online: Parents urged to be careful with child-related information the issue covered relates to Read the rest of this entry »

The internet of things has the same exposure to data security problems as the internet proper – an example being Phillips Smart TV open to hacking

Ars Technica reports in Philips Smart TVs wide open to Gmail cookie theft, other serious hacks regarding serious security flaws that could allow hackers to  steal information from attached USB sticks and pilfer authentication cookies which could give them access to Read the rest of this entry »

Meta data and their collection; two approaches.

The collection of metadata is a growing area of concern for privacy practitioners, advocates and regulators.  Big data, with every more powerful computing power and more sophisticated algorithims, have Read the rest of this entry »

Australian Law Reform Commission releases the Serious Invasion of Privacy in the Digital Era

The Australian Law Reform Commission (the “ALRC”) has released its long awaited discussion paper on Serious Invasions of Privacy in the Digital Era (found here).

Submissions are due by no later than 12 May 2014.  That is a very short time frame given the size of the report, over 200 pages, and 47 recommendations.

The media release provides:

The Australian Law Reform Commission (ALRC) today released a Discussion Paper, Serious Invasions of Privacy in the Digital Era (DP 80, 2014). The Terms of Reference for this Inquiry ask the ALRC to consider the detailed legal design of a statutory cause of action and, in addition, other innovative ways the law might prevent or redress serious invasions of privacy.

The ALRC is Read the rest of this entry »

Facebook and privacy dinasour

March 29, 2014

Facebook and privacy may not be antonyms as such but they often end up in separate camps. Slate in Facebook’s Privacy Dinosaur Wants to Make Sure You’re Not Oversharing reports on the curious development of Facebook is developing a privacy check up to avoid over sharing of personal information. As the article makes clear the motivations are not clear.  The high road explanation is Read the rest of this entry »

Julie Gayet v Closer: French privacy case – successful claim by plaintiff

Privacy law of civil jurisdictions, such as Germany and France, are quite separate and distinct from their common law cousins, the USA, Canada, New Zealand and United Kingdom.  The US and New Zealand has a stand alone privacy tort, Canada is moving in that direction and the UK’s case law still pays lip service to equitable underpinnings in its misuse of private information actions but is becoming ever so much a tort in all but name.  But the defences and the weighing exercise in the common law stand in stark contra Read the rest of this entry »

The Australian Law Reform Commission to release its long awaited discussion paper on a statutory right of action for serious invasions of privacy (and other matters) on 31 March 2014

March 28, 2014

Last night Professor McDonald gave the first lecture of the 2014 Distinguished Speakers program at the Sydney Law School.  Her topic, not surprisingly, was on the inquiry by the ALRC on Serious Invasions of Privacy.

The Discussion Paper, running to 204 pages and containing 47 recommendations, will be released on Monday 31 March 2014.

Itnews gave it detailed coverage in ‘Safe harbour’ for Facebook, Google proposed for Aus privacy law.

It provides:

The Australian Law Reform Commission last night offered up a sneak preview of recommendations it will make around new privacy law, which will include a ‘safe harbour’ provision for internet platform providers such as Facebook and Google.

In June last year then-Attorney-General Mark Dreyfus asked the ALRC to inquire into the possibility of a new statute that would apply to serious invasions of privacy conducted by individuals and organisations (as opposed to the existing Privacy Act which is focused on data protection and applies to organisations with a turnover exceeding $3 million only).

Unlike many European countries and the US, Australia has never offered an explicit legal protection to its citizens against gross invasions of privacy.

On Monday, the ALRC will Read the rest of this entry »

Drones and collisions and police

Itnews reports on a drone v helicopter near miss in Drone almost collides with Westpac Rescue chopper.   It is hardly an unexpected event.  The expansion in the use of drones by properly trained and accredited operators and the hobbyists, the limited enforcement of regulations is making for a complicated situation in the airwaves.  The lack of privacy protection is a significant issue both in Australia (where protections are weak and have been traditionally enforced sporadically) and the United States of America, where the legislative response has been focused at a state level.

It provides:

UAV aimed for helicopter.

 The Australian Transport Safety Bureau is investigating a narrowly avoided collision on Saturday night between a Westpac Rescue chopper and an unmanned aerial vehicle.

One of two Bell 412 choppers the Westpac Rescue Helicopter Service operates was involved in a near miss with the UAV near Read the rest of this entry »

USA to strengthen Safe Harbour framework for data transfers

The Safe Harbour arrangements, in place since 2000, in the United States of America (the “USA”) regarding transfer of personal data from the European Union to the USA has been an imperfect vehicle for ensuring some form of compatibility in the processing of personal information, data protection and free movement of data by US organisations to a standard consistent with the EU Directive 95/46EC.    In November the European Commission issued quite a critical report on the functioning of the Safe Harbour arrangements.  It is found here.  It is, for practitioners in the privacy field, a very useful and informative document.  The conclusions and recommendations are:

1.                      CONCLUSIONS AND RECOMMENDATIONS

Since its adoption in 2000, Safe Harbour has become a vehicle for EU-US flows of personal data. The importance of efficient protection in case of transfers of personal data has Read the rest of this entry »