Understrength and underfunded: the state of private sector privacy law enforcement in Australia
In Europe, privacy regulators are sending clear signals that companies need to take collection, use and disclosure of personal information
Privacy, disclosures and the importance of context
The NSW Civil and Administrative Tribunal has recently clarified when disclosures will be part of the NSW Police’s ‘administrative and
Trust without verifying? an initial reaction to the US Government’s Schrems II white paper
The US Government has release a white paper in response to the Schrems II judgment. This post is a initial
The employee records exemption: European retailer gets fined for compiling dossiers on its workers
Retailer H&M has been fined A$57million (€35million) for illegally compiling detailed records on its employees in Germany. The company had
Providing documents to ASIC without waving legal privilege: ASIC v RI Advice Group
The Federal Court has ruled that certain documents that RI Advice Group (RI) provided to ASIC are admissible in ASIC’s
GDPR guidance on third country data transfers
In July 2020, in the Schrems II decision, the European Court of Justice (ECJ) considered the data transfer arrangements that
1.4 million reasons to be transparent in your use of personal info: ACCC v HealthEngine Pty Ltd
On 20 August 2020, the ACCC obtained a Federal Court order fining a health tech company $1.4 million for misleading
Lessons from a data breach: data supply chains and paying ransoms
Anglicare Sydney has been the subject of a ransomware attack that has resulted in the theft of a large amount
ASIC v RI Advice Group Pty Ltd
ASIC has alleged in the Federal Court that RI Advice Group has breached it’s obligations under its Financial Services Licence
Misleading and deceptive handling of personal data: ACCC v Google
The ACCC has commenced proceedings against Google for its failure to properly inform and obtain consumers’ consent when collecting and
