<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Peter Clarke &#8211; Australian Privacy Foundation</title>
	<atom:link href="https://privacy.org.au/author/peter-clarke/feed/" rel="self" type="application/rss+xml" />
	<link>https://privacy.org.au</link>
	<description>Defending your right to be free from intrusion</description>
	<lastBuildDate>Thu, 28 Apr 2022 22:25:12 +0000</lastBuildDate>
	<language>en-AU</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	

<image>
	<url>https://privacy.org.au/wp-content/uploads/2021/04/cropped-logo_horizontal2-32x32.png</url>
	<title>Peter Clarke &#8211; Australian Privacy Foundation</title>
	<link>https://privacy.org.au</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>Australian Competition and Consumer Commission releases 4th interim report as part of its Digital Platform Services Inquiry, raising privacy issues on collection of data</title>
		<link>http://www.peteraclarke.com.au/2022/04/29/australian-competition-and-consumer-commission-releases-4th-interim-report-as-part-of-its-digital-platform-services-inquiry-raising-privacy-issues-on-collection-of-data/</link>
		
		<dc:creator><![CDATA[Peter Clarke]]></dc:creator>
		<pubDate>Thu, 28 Apr 2022 22:25:12 +0000</pubDate>
				<category><![CDATA[Commentary]]></category>
		<guid isPermaLink="false">https://privacy.org.au/?p=5034</guid>

					<description><![CDATA[Yesterday the Australian Competition and Consumer Commission (“ACCC”) yesterday released Interim Report No s – General online retail marketplaces. The report necessarily deals with the issue of data collection and privacy. It does not contain any new insight or previously unknown fact or issue however it does synthesise and summarise the relevant issues. All too often these issues are not considered with this level of focus. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2022/04/29/australian-competition-and-consumer-commission-releases-4th-interim-report-as-part-of-its-digital-platform-services-inquiry-raising-privacy-issues-on-collection-of-data/">Read More</a></span>]]></description>
										<content:encoded><![CDATA[Yesterday the Australian Competition and Consumer Commission (“ACCC”) yesterday released Interim Report No s – General online retail marketplaces. The report necessarily deals with the issue of data collection and privacy. It does not contain any new insight or previously unknown fact or issue however it does synthesise and summarise the relevant issues. All too often these issues are not considered with this level of focus. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2022/04/29/australian-competition-and-consumer-commission-releases-4th-interim-report-as-part-of-its-digital-platform-services-inquiry-raising-privacy-issues-on-collection-of-data/">Read More</a></span>]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Attorney General’s Department releases discussion paper on reform to the Privacy Act 1988</title>
		<link>http://www.peteraclarke.com.au/2021/10/27/attorney-generals-department-releases-discussion-paper-on-reform-privacy-act/</link>
		
		<dc:creator><![CDATA[Peter Clarke]]></dc:creator>
		<pubDate>Wed, 27 Oct 2021 10:13:30 +0000</pubDate>
				<category><![CDATA[Commentary]]></category>
		<guid isPermaLink="false">https://privacy.org.au/?p=4860</guid>

					<description><![CDATA[On 25 October the Attorney General’s Department released its long awaited Privacy Act Review Discussion paper (the “Paper”). It is far from comprehensive. It avoids making recommendations about a statutory tort of privacy. Rather it continues the continual policy loop as governments of every persuasion push this issue into further review, then consultation then bury it in a report and then hope it goes away until it is recommended or otherwise finds itself before the Government. It has been a hugely expensive, time intensive waste of time. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2021/10/27/attorney-generals-department-releases-discussion-paper-on-reform-privacy-act/">Read More</a></span>]]></description>
										<content:encoded><![CDATA[On 25 October the Attorney General’s Department released its long awaited Privacy Act Review Discussion paper (the “Paper”). It is far from comprehensive. It avoids making recommendations about a statutory tort of privacy. Rather it continues the continual policy loop as governments of every persuasion push this issue into further review, then consultation then bury it in a report and then hope it goes away until it is recommended or otherwise finds itself before the Government. It has been a hugely expensive, time intensive waste of time. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2021/10/27/attorney-generals-department-releases-discussion-paper-on-reform-privacy-act/">Read More</a></span>]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Information Commissioner issues determination into 7-Eleven Stores for APP breaches through use of facial recognition technology of unsuspecting customers</title>
		<link>http://www.peteraclarke.com.au/2021/10/19/information-commissioner-issues-determination-into-7-eleven-stores-pty-ltd-2021-aicmr-50-29-september-2021-for-breaches-of-australian-privacy-principles-3-and-5-through-use-of-facial-recognition/#new_tab</link>
		
		<dc:creator><![CDATA[Peter Clarke]]></dc:creator>
		<pubDate>Tue, 19 Oct 2021 07:20:30 +0000</pubDate>
				<category><![CDATA[Commentary]]></category>
		<guid isPermaLink="false">https://privacy.org.au/?p=4849</guid>

					<description><![CDATA[The Australian Information Commissioner has issued a very significant determination resulting from a Commissioner initiated investigation into 7-Eleven, where she found that the company had breached Australian Privacy Principle (APP) 3 and 5 of the Privacy Act 1988. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2021/10/19/information-commissioner-issues-determination-into-7-eleven-stores-pty-ltd-2021-aicmr-50-29-september-2021-for-breaches-of-australian-privacy-principles-3-and-5-through-use-of-facial-recognition/#new_tab">Read More</a></span>]]></description>
										<content:encoded><![CDATA[The Australian Information Commissioner has issued a very significant determination resulting from a Commissioner initiated investigation into 7-Eleven, where she found that the company had breached Australian Privacy Principle (APP) 3 and 5 of the Privacy Act 1988. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2021/10/19/information-commissioner-issues-determination-into-7-eleven-stores-pty-ltd-2021-aicmr-50-29-september-2021-for-breaches-of-australian-privacy-principles-3-and-5-through-use-of-facial-recognition/#new_tab">Read More</a></span>]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Today is data privacy day…a lot more work to do beyond reminding people of the need to keep data private and secure</title>
		<link>http://www.peteraclarke.com.au/2021/01/28/today-is-data-privacy-day-a-lot-more-work-to-do-beyond-reminding-people-of-the-need-to-keep-data-private-and-secure/</link>
		
		<dc:creator><![CDATA[Peter Clarke]]></dc:creator>
		<pubDate>Thu, 28 Jan 2021 02:00:54 +0000</pubDate>
				<category><![CDATA[Commentary]]></category>
		<category><![CDATA[External Links]]></category>
		<guid isPermaLink="false">https://privacy.org.au/?p=4471</guid>

					<description><![CDATA[Thursday 28 January 2021 is Data Privacy Day. It is also the 40th anniversary of Convention 108 and the 15th edition of the Data Protection Day. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2021/01/28/today-is-data-privacy-day-a-lot-more-work-to-do-beyond-reminding-people-of-the-need-to-keep-data-private-and-secure/">Read More</a></span>]]></description>
										<content:encoded><![CDATA[Thursday 28 January 2021 is Data Privacy Day. It is also the 40th anniversary of Convention 108 and the 15th edition of the Data Protection Day. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2021/01/28/today-is-data-privacy-day-a-lot-more-work-to-do-beyond-reminding-people-of-the-need-to-keep-data-private-and-secure/">Read More</a></span>]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Significant data breach from Ambulance Tasmania through interception of its paging service with data of patients who contact ambulances published on line</title>
		<link>http://www.peteraclarke.com.au/2021/01/08/significant-data-breach-from-ambulance-tasmania-through-interception-of-its-paging-service-with-data-of-patients-who-contact-ambulances-published-on-line/</link>
		
		<dc:creator><![CDATA[Peter Clarke]]></dc:creator>
		<pubDate>Fri, 08 Jan 2021 02:00:35 +0000</pubDate>
				<category><![CDATA[Commentary]]></category>
		<category><![CDATA[External Links]]></category>
		<guid isPermaLink="false">https://privacy.org.au/?p=4469</guid>

					<description><![CDATA[Ambulance Tasmania has suffered a massive data breach. According to the ABC, personal information of every Tasmanian who called the Tasmanian Ambulance Service since November 2020 has been accessed and posted on line by a third party.  The specific nature of the breach is unknown but it was to the paging system.  What makes this breach so damaging is that the data accessed is sensitive information, relating to a person’s health status as well as that person/s age, gender and address.

What is both surprising and disturbing is that the data hacked from Ambulance Tasmania has been publicly visible since November last year. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2021/01/08/significant-data-breach-from-ambulance-tasmania-through-interception-of-its-paging-service-with-data-of-patients-who-contact-ambulances-published-on-line/">Read More</a></span>]]></description>
										<content:encoded><![CDATA[Ambulance Tasmania has suffered a massive data breach. According to the ABC, personal information of every Tasmanian who called the Tasmanian Ambulance Service since November 2020 has been accessed and posted on line by a third party.  The specific nature of the breach is unknown but it was to the paging system.  What makes this breach so damaging is that the data accessed is sensitive information, relating to a person’s health status as well as that person/s age, gender and address.

What is both surprising and disturbing is that the data hacked from Ambulance Tasmania has been publicly visible since November last year. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2021/01/08/significant-data-breach-from-ambulance-tasmania-through-interception-of-its-paging-service-with-data-of-patients-who-contact-ambulances-published-on-line/">Read More</a></span>]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Cyber attack at BlueScope Steel and MyBudget highlights a chronic problem facing businesses, particularly those with poor privacy protocols</title>
		<link>http://www.peteraclarke.com.au/2020/05/16/cyber-attack-at-bluescope-steel-and-mybudget-highlights-a-chronic-problem-facing-businesses-particularly-those-with-poor-privacy-protocols/</link>
		
		<dc:creator><![CDATA[Peter Clarke]]></dc:creator>
		<pubDate>Sat, 16 May 2020 11:20:53 +0000</pubDate>
				<category><![CDATA[Commentary]]></category>
		<category><![CDATA[External Links]]></category>
		<guid isPermaLink="false">https://privacy.org.au/?p=4348</guid>

					<description><![CDATA[This year has seen some major cyber attacks which have crippled businesses. The malware attacks affecting Toll Transport, Bluescope Steel and MyBudget were probably all preventable. It is highly likely that human error was responsible for each attack. That bespeaks a failure in training and operations. An investigation of a data breach often reveals significant problems with compliance with the Australian Privacy Principles and problems with either the quality or the ongoing nature of training. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2020/05/16/cyber-attack-at-bluescope-steel-and-mybudget-highlights-a-chronic-problem-facing-businesses-particularly-those-with-poor-privacy-protocols/">Read More</a></span>]]></description>
										<content:encoded><![CDATA[This year has seen some major cyber attacks which have crippled businesses. The malware attacks affecting Toll Transport, Bluescope Steel and MyBudget were probably all preventable. It is highly likely that human error was responsible for each attack. That bespeaks a failure in training and operations. An investigation of a data breach often reveals significant problems with compliance with the Australian Privacy Principles and problems with either the quality or the ongoing nature of training. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2020/05/16/cyber-attack-at-bluescope-steel-and-mybudget-highlights-a-chronic-problem-facing-businesses-particularly-those-with-poor-privacy-protocols/">Read More</a></span>]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Australian Information Commission v Facebook Inc [2020] FCA 531 (22 April 2020): application for service outside of Australia, the Commissioner’s prima facie case. The opening round in the first civil proceeding for breach of the Privacy Act by the Commissioner</title>
		<link>http://www.peteraclarke.com.au/2020/04/26/10734/</link>
		
		<dc:creator><![CDATA[Peter Clarke]]></dc:creator>
		<pubDate>Sun, 26 Apr 2020 21:15:45 +0000</pubDate>
				<category><![CDATA[Commentary]]></category>
		<category><![CDATA[External Links]]></category>
		<guid isPermaLink="false">https://privacy.org.au/?p=4222</guid>

					<description><![CDATA[On 23 April 2020 in  Australian Information Commission v Facebook Inc the Australian Information Commissioner successfully obtained interim suppression and non publication orders and orders to serve outside Australia and substituted service against Facebook Inc.

This is the first of what is likely to be a number of interlocutory judgments as the civil penalty proceedings slowly move towards a hearing. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2020/04/26/10734/">Read More</a></span>]]></description>
										<content:encoded><![CDATA[On 23 April 2020 in  Australian Information Commission v Facebook Inc the Australian Information Commissioner successfully obtained interim suppression and non publication orders and orders to serve outside Australia and substituted service against Facebook Inc.

This is the first of what is likely to be a number of interlocutory judgments as the civil penalty proceedings slowly move towards a hearing. <span class="excerpt-more"><a href="http://www.peteraclarke.com.au/2020/04/26/10734/">Read More</a></span>]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Indian Supreme Court rules that individual privacy is a fundamental right. Another jurisdiction acknowledges a right to privacy… but still not Australia</title>
		<link>https://privacy.org.au/2017/08/27/indian-supreme-court-rules-that-individual-privacy-is-a-fundamental-right-another-jurisdiction-acknowledges-a-right-to-privacy-but-still-not-australia/</link>
		
		<dc:creator><![CDATA[Peter Clarke]]></dc:creator>
		<pubDate>Sun, 27 Aug 2017 07:11:39 +0000</pubDate>
				<category><![CDATA[Commentary]]></category>
		<guid isPermaLink="false">http://privacy.org.au/?p=1275</guid>

					<description><![CDATA[The Indian Supreme Court, <a href="https://www.scribd.com/document/357097283/Complete-Supreme-Court-Judgement-in-Right-to-Privacy-Case#download">in a unanimous decision of Justice K S Puttaswamy (Retd) &#038; anor v Union of India &#038; ors</a>, has today found that individual privacy is a fundamental right. It is a comprehensive decision running to 547 pages and 5 years in gestation.  Even so India has recognised such a right ahead of Australia. <span class="excerpt-more"><a href="https://privacy.org.au/2017/08/27/indian-supreme-court-rules-that-individual-privacy-is-a-fundamental-right-another-jurisdiction-acknowledges-a-right-to-privacy-but-still-not-australia/">Read More</a></span>]]></description>
										<content:encoded><![CDATA[<p style="text-align: justify;">The Indian Supreme Court, <a href="https://www.scribd.com/document/357097283/Complete-Supreme-Court-Judgement-in-Right-to-Privacy-Case#download">in a unanimous decision of Justice K S Puttaswamy (Retd) &amp; anor v Union of India &amp; ors</a>, has today found that individual privacy is a fundamental right. It is a comprehensive decision running to 547 pages and 5 years in gestation. Even so India has recognised such a right ahead of Australia.</p>
<p style="text-align: justify;">This event has been<span id="more-9013"></span> reported by Reuters with <a href="https://www.reuters.com/article/us-india-court-privacy-idUSKCN1B40CE?il=0">India’s top court rules privacy a fundamental right in blow to government</a>, the Hindustantimes with <a href="http://www.hindustantimes.com/india-news/supreme-court-verdict-on-right-to-privacy-the-case-arguments-and-what-s-next/story-0Sz00UZbAkNui5YxDSUSsI.html">Supreme Court verdict on right to privacy: All you need to know about the case, arguments and what’s next</a> and <a href="http://www.bbc.com/news/world-asia-india-41033954">Indian Supreme Court in landmark ruling on privacy</a> (among others).</p>
<p>The BBC article provides:</p>
<p class="story-body__introduction" style="text-align: justify; padding-left: 30px;">India’s Supreme Court has ruled that citizens have a fundamental right to privacy, in a landmark judgement.</p>
<p style="text-align: justify; padding-left: 30px;">The judges ruled the right to privacy was “an intrinsic part of Article 21 that protects life and liberty”.</p>
<p style="text-align: justify; padding-left: 30px;">The ruling has implications for the government’s vast biometric ID scheme, covering access to benefits, bank accounts and payment of taxes.</p>
<p style="text-align: justify; padding-left: 30px;">Rights groups are concerned personal data could be misused. The authorities want registration to be compulsory.</p>
<p style="text-align: justify; padding-left: 30px;">The verdict overturns two previous rulings by the top court which said that privacy was not a fundamental right.</p>
<p style="text-align: justify; padding-left: 30px;">The nine-judge bench, comprising all the sitting judges in the Supreme Court was necessary because one of the earlier rulings made in 1954, was delivered by an eight-judge bench.</p>
<hr class="story-body__line" style="padding-left: 30px;" />
<h2 class="story-body__crosshead" style="text-align: justify; padding-left: 30px;">Analysis by Geeta Pandey, BBC News, Delhi</h2>
<p style="text-align: justify; padding-left: 30px;">The Supreme Court verdict is a huge setback for the government which has insisted that privacy is not an inalienable fundamental right guaranteed under the constitution.</p>
<p style="text-align: justify; padding-left: 30px;">When the Aadhaar database was launched, the authorities said it would be a voluntary scheme which would help them weed out corruption while passing on welfare benefits to the most needy citizens.</p>
<p style="text-align: justify; padding-left: 30px;">But in the past couple of years, it has been made mandatory for filing tax returns, opening bank accounts, securing loans, buying and selling property or even making purchases of 50,000 rupees ($780; £610) and above.</p>
<p style="text-align: justify; padding-left: 30px;">The petitioners had said this would help the authorities create a comprehensive profile of a person’s spending habits and expressed apprehension that this data could be misused by a government which does not believe in people’s right to privacy.</p>
<p style="text-align: justify; padding-left: 30px;">During the hearing of the case, the government’s lawyers had told the court that citizens did not have absolute right over their bodies which meant that people could be forced to give their biometrics.</p>
<p style="text-align: justify; padding-left: 30px;">Alarmed citizens can now breathe a sigh of relief – as one legal expert said, Thursday’s order recognises the right of a citizen to be the master of his body and mind.</p>
<p>As of today India has better privacy protections from the courts than Australia.</p>
<p style="text-align: justify;">The development of the common law regarding privacy in Australia has been slow and, in the main, excruciating. In the 2001 decision of <a href="http://www.austlii.edu.au/cgi-bin/viewdoc/au/cases/cth/HCA/2001/63.html?context=1;query=Lenah">ABC v Lenah Game Meats Pty Ltd</a> the High Court left open the possibility, only, of a possible common law right to privacy though more likely a development of an equitable claim of misuse of private information. The Victorian Court of Appeal in <a href="https://jade.io/article/87263">Giller v Procopets</a> recognised both an equitable claim for misuse of private information and that it is not necessary to prove psychological damage. Distress was sufficient. That was where the United Kingdom Law was 10 years plus ago. It is a complicated cause of action which is not well suited to the issues thrown up by privacy breaches.</p>
<p style="text-align: justify;">In 2015 the United Kingdom moved away from an equitable claim of misuse of private information to a fully functioning tort in the Court of Appeal decision of <a href="http://www.5rb.com/wp-content/uploads/2015/03/Vidal-Hall-v-Google-CA.pdf">Google Inc v Vidal – Hall &amp; ors</a>. That made sense and allowed the court to set out elements of the cause of action that are more fair to both plaintiffs and defendants. Unfortunately it is unlikely that superior courts in Australia will adopt this course.</p>
<p style="text-align: justify;">At a state level in Victoria the consideration by the Victorian Civil and Administrative Tribunal (“VCAT”) of claims under the Information Privacy Act and later Privacy and Data Protection Act, for interference with a person’s privacy by government agencies or related service providers, has focused on and generally descended into a morass of administrative law arcana. The analysis adopted in these cases often defies easy understanding if one has a background in privacy law and understanding of the privacy legislation. Cases seem to become swamped by minutiae of process, the preferred implement from the administrative tool box as invariably advocated by government agencies. This is not what the privacy legislation should be about. It is little wonder that there are so few successful claims before VCAT. And that will likely to remain so if this privacy litigation remains in the maw of administrative law.</p>
<hr style="width: 40px; text-align: left; margin: 0; padding: 0;" /><p class="no-break">This piece was first published at Illigitimi non carborundum, the personal blog of APF Board Member Peter Clarke. Read the original here: <a href="https://www.policyforum.net/privacy-postal-plebiscite/">https://www.policyforum.net/privacy-postal-plebiscite/</a></p>]]></content:encoded>
					
		
		
			</item>
	</channel>
</rss>
