- Chief Compliance Officer and VP of Legal Affairs, Arrow Electronics
By 
Jaclyn Jaeger2022-11-14T19:27:00
The Australian government is weighing stringent new privacy reforms that would establish among the steepest penalty regimes in the world for serious or repeated breaches.
On Oct. 26, Australia’s Attorney General Mark Dreyfus brought forth before parliament the “Privacy Legislation Amendment (Enforcement and Other Measures) Bill 2022,” proposing significant amendments to the country’s 1988 Privacy Act. On Nov. 9, the bill passed the House of Representatives without amendment and moved to the Senate. The Senate Standing Committee on Legal and Constitutional Affairs will review the bill and is scheduled to issue its report Nov. 22.
The most substantial change would increase maximum civil penalties for “serious or repeated” breaches of privacy from the current AUD$2.22 million (U.S. $1.5 million) cap to an amount not more than the greater of AUD$50 million (U.S. $33.5 million); three times the benefit obtained by the company; or, if a court cannot determine the value of the benefit obtained, 30 percent of a company’s domestic turnover in the relevant period.
THIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.
News and analysis for the well-informed compliance or audit exec. Select an option and click continue.
Annual Membership $499 Value offer
Full price one year membership with auto-renewal.
Membership $599
One-year only, no auto-renewal.
Australia released an updated cybersecurity strategy that will rely more heavily on public-private partnerships to support the country’s cyber defense efforts.
The Optus data breach should serve as a reminder for all organizations that cybersecurity incidents are serious business risks that are costly to make right.
Optus isn’t alone in trying to calm public nerves and find out what happened to cause a breach that exposed the records of 9.8 million current and former customers. Australian government agencies are also attempting to fight fires and reassure citizens their personal info is safe.
Any product that uses AI needs to be safety assessed for its entire lifespan under new rules that went into effect recently across the EU. Experts warned companies using AI to tailor products could be classed as “manufacturers” and face the same duty of care as developed.
When lawmakers slam the U.K.’s chief financial regulator as “incompetent,” it not only opens the doors for others to pile criticism on it, but it sparks a debate about how the organization can be improved–or removed.
The U.K. Financial Conduct Authority apologized to investors in peer-to-peer investment firm Collateral for not acting swiftly enough to prevent Collateral from defrauding its customers.
