Privacy, disclosures and the importance of context
The NSW Civil and Administrative Tribunal has recently clarified when disclosures will be part of the NSW Police’s ‘administrative and
Category: case studies
The employee records exemption: European retailer gets fined for compiling dossiers on its workers
Retailer H&M has been fined A$57million (€35million) for illegally compiling detailed records on its employees in Germany. The company had
Lessons from a data breach: data supply chains and paying ransoms
Anglicare Sydney has been the subject of a ransomware attack that has resulted in the theft of a large amount
How *not* to respond to a privacy breach: ‘SF’ and ‘SG’
This case was a dispute between a patient seeking records from a former treating psychologist. The Privacy Commissioner found a
What we can learn from the Grubman ransomware attack
Overview In May this year, the US entertainment law firm Grubman, Shire, Meiselas & Sacks (Grubman) was a target of
The consequences of a lax approach to data governance
The Information Commissioner’s Office (ICO) decision on Cathay Pacific’s data breach highlights the consequences of being complacent with data governance. With more
Record fine for spam – how not to get caught
ACMA has announced that it has fined Woolworths $1mil for breaches of the Spam Act. This is the highest fine that the
