The Office of the Australian Information Commissioner has released Data breach notification guide: A guide to handling personal information security breaches. Some excerpts: Preventing data breaches — obligations under the Privacy Act Security is a basic element of information privacy.4 In Australia, this principle is reflected in the Privacy Act in the APPs Agencies and…
Category: Non-U.S.
UK: Personal details of 47,000 Brent residents for sale on the dark web
Emma Youle reports: The personal information of more than 47,000 people living in Brent has been put up for sale on the dark web, according to new data revealing the startling scale of online identity fraud. […] C6 Intelligence, which works with leading financial and retail companies, has penetrated more than 50 criminal websites and…
Orange sanctioned by French regulator after customer data breach
Orange has received a public warning from the French privacy watchdog Cnil after personal details of more than a million of its customers were leaked on the internet. Orange notified Cnil of the problem in April, blaming a technical fault at one of its marketing suppliers. Almost 1.3 million customers were affected, with their name,…
UK: Hammersmith and Fulham policewoman fired after breaching police data act
Graham Spence reports on another case of police misuse of databases: Trainee Detective Constable Sadaf Bhatti, 39 , a former Metropolitan Police Service officer based at Hammersmith and Fulham has been dismissed without notice. Bhatti had previously pleaded guilty to three counts of breaching the Data Protection Act at Westminster Magistrates’ Court on Thursday, 5…
NZ: Have your say on their new ‘Naming Policy’
From the Office of the Privacy Commissioner of New Zealand: We think it is time to ‘name names’ where it is warranted. Our view is that in certain circumstances, the Privacy Act is better served by revealing the organisations that have breached the law. Up to now, we’ve rarely publicly named organisations. It was done…
UK: Repeated security failings lead to £180,000 fine for Ministry of Justice
Long-time readers of DataBreaches.net will recall that I’ve posted breaches involving the UK Ministry of Justice before (cf this post or this post about a monetary penalty involving an email breach at HMP Cardiff). Now there’s another monetary penalty, it seems: The Information Commissioner’s Office (ICO) has served a £180,000 penalty on the Ministry of Justice over…