The CEO of Services Australia (Agency) has recently been found by the Australian Privacy Commissioner (Commissioner) to have interfered with a customer’s privacy after a series of issues involving the Agency intertwining customer records.
It’s the worst nightmare of every business: you get a call from your IT provider: there’s been suspicious activity on your network. It appears that hundreds or thousands of client records were accessible to a third party for several hours. They are still trying to work out what was accessed, and if anything was exfiltrated. …
Read more
13/09/2024 Today the long awaited first tranche of amendments to the Privacy Act 1988 (Cth) (Privacy Act) entered parliament. The Privacy and Other Legislation Amendment Bill 2024 (Bill) was introduced and read for a first time today in the House of Representatives. In the Explanatory Memorandum to the Bill, the Attorney-General conceded that to date, …
Read more
On 17 February 2023, the Security of Critical Infrastructure (Critical infrastructure risk management program) Rules (CIRMP Rules) were registered under the SOCI Act and set out mandatory requirements for responsible entities.
On 22 November 2023, the Australian Government released the 2023-2030 Australian Cyber Security Strategy (the Strategy). The goal of the strategy is for Australia to become a world leader in cyber security by 2030, and to build stronger cyber defences to enable our citizens and businesses to prosper, and to build cyber resilience so we can …
Read more
In the landscape of Australian Business, government and not-for-profit, the strategic management of data has become increasingly vital. However, as we see time and time again in data breaches, data can also pose a significant risk to organisations if not properly managed.
The Digital ID Bill passed Federal Parliament in May and will come into force in November 2024. Overall, the legislation aims to give Australians secure and effective ways in which to verify their identify for use in online transactions with government and business.
Ransomware attacks present an escalating threat to global security, one which threatens a broad range of organisations ranging from government agencies to small businesses. Driven by an increasingly interconnected IoT landscape and the use of outdated or legacy systems, ransomware poses a growing threat to Australia’s critical infrastructure – including the healthcare, financial services, transportation, …
Read more
General protections from unlawful discrimination under the Fair Work Act 2009 (Cth) apply to both employees and prospective employees. It is important to ensure that reliance on tools such as AI in recruitment processes do not infringe on the protections from discrimination that are afforded to prospective employees. The list of attributes that are protected …
Read more
Griffin Legal endorses a ‘privacy-by-design’ approach, where organisations proactively embed good privacy practices into the design and development of a program that involves any collection, use, or disclosure of personal information. Every decision and new process must be approached via a privacy-first mindset, promoting both functionality and privacy protection.