Quote Of The Year

Timeless Quotes - Sadly The Late Paul Shetler - "Its not Your Health Record it's a Government Record Of Your Health Information"

or

H. L. Mencken - "For every complex problem there is an answer that is clear, simple, and wrong."

Tuesday, November 01, 2022

Commentators and Journalists Weigh In On Digital Health And Related Privacy, Safety, Social Media And Security Matters. Lots Of Interesting Perspectives - November 01, 2022.

-----

This weekly blog is to explore the news around the larger issues around Digital Health, data security, data privacy, AI / ML. technology, social media and any related matters.

I will also try to highlight ADHA Propaganda when I come upon it.

Just so we keep count, the latest Notes from the ADHA Board were dated 6 December, 2018 and we have seen none since! It’s pretty sad!

Note: Appearance here is not to suggest I see any credibility or value in what follows. I will leave it to the reader to decide what is worthwhile and what is not! The point is to let people know what is being said / published that I have come upon, and found interesting.

-----

https://www.innovationaus.com/offshore-data-collection-to-be-subject-to-privacy-act/

Offshore data collection to be subject to Privacy Act

Brandon How
Reporter

26 October 2022

Foreign companies operating in Australia could soon be subject to the Privacy Act even if they do not collect or hold citizen data “directly from a source in Australia” under new laws that also propose significantly higher penalties for data breaches.

Attorney-General Mark Dreyfus introduced the Privacy Legislation Amendment (Enforcement and Other Measures) Bill 2022 to Parliament on Wednesday, having foreshadowed the changes over the weekend.

At almost the same time, Medibank revealed the scale of its data breach was far worse than first anticipated, with all 3.9 million customers served by the health insurer and its subsidiaries potentially compromised.

The bill will amend the Privacy Act to raise the maximum penalty of serious or repeated breaches from $2.22 million to $50 million or three-times the value of any benefit obtained through the misuse of information, whatever if greater.

If the value of the data cannot be determined, the firm will be fined 30 per cent of its adjusted turnover in the relevant period.

-----

What do criminals want with our health data — and what could they use it for?
By Jessica Black

Australians learned the scale of two major health data breaches this week, with some patients' personal information — including credit card details and test results — posted to the dark web.

On Thursday, pathology company Australian Clinical Labs revealed its subsidiary Medlab, which carries out COVID-19 testing and other services, had been hacked eight months ago — but the company is only now letting people know.

Earlier this week, Medibank Private revealed criminals had accessed the data of at least 4 million customers, including their health claims.

But why are criminals going after our health information, and what value do they see in it?
Why are criminals targeting healthcare?

The motive behind the Optus breach was clear enough, but what criminals hope to exploit from our health data is less so, says Peter Lewis, director of the Centre for Responsible Technology, whose data was accessed in both the telco and Medibank Private breaches.

-----

https://www.ausdoc.com.au/news/international-venture-capitalists-plough-millions-into-gp-telehealth-clinics/

International venture capitalists plough millions into GP telehealth clinics

InstantScripts managing director Dr Asher Freilich argues that you don't even need an ‘Uber’ angle to find investors

Sarah Simpkins

28 October 2022

General practice is in a financial clinch right now as doctors start walking away from bulk-billing, so why would venture capital funds start ploughing say $4 million, $20 million or even $60 million into GP businesses?

This is actually happening. But it seems, at least on the surface, the financial interest is for the telehealth-only version of the specialty, an idea that can cause disquiet.

Eucalyptus Health, which offers telehealth consults for conditions like obesity and erectile dysfunction, has raised a staggering $60 million from various capital funds.

Another business called Rosemary Health, which offers to treat an even wider range of conditions via video and phone, has raised $4 million from investors in Australia, the US and Singapore.

Dr Amandeep Hansra, a GP in Sydney and business investor, admits the opportunities came out of the COVID-19 crisis for entrepreneurs with an eye on healthcare.

-----

https://medicalrepublic.com.au/10-spine-chilling-health-provider-privacy-clauses-no-one-reads/80154

28 October 2022

10 spine-chilling health provider privacy clauses no one reads

By Jeremy Knibbs

These give a little insight into how the Medibank Private hack could have occurred. Does anyone really care, though?

Early one morning, while waiting for the shuttle bus to this year’s HIMSS conference (the world’s biggest digital health conference), in Orlando, Florida, I found myself sitting next to what looked like a skateboarder. I know them pretty well because one of my sons hangs with a lot of skateboarders.

This one had long hair and a scruffy beard and was sporting long baggy shorts, skate shoes, white socks halfway to his knees with a skate logo and a very loose fitting T-shirt.

But he also had a HIMSS VIP badge around his neck.

Intrigued, I asked him what he was doing at HIMSS.

“Oh, cybersecurity,” he answered.

More intrigued, I asked who he worked for.

And this is what he said, sounding pretty chuffed: “I’m not actually supposed to say, but the NSA.”

-----

https://www.news.com.au/technology/online/hacking/pathology-lab-acl-criticised-for-fivemonth-delay-in-reporting-patient-data-hack/news-story/243cccc2109a1fcc33d795b83d200844

Pathology lab, ACL, criticised for five-month delay in reporting patient data hack

A cyberterror expert has questioned why a pathology giant waited five months to inform patients of a data breach that saw credit card and health records leaked.

Jessica Wang

October 28, 2022 - 10:44AM

One of Australia’s largest pathology labs, Australian Clinical Labs (ACL) has been criticised for waiting five months to inform patients their data had been stolen and leaked onto the dark web.

On Thursday, ACL - which has an annual revenue of almost $1 billion - made a ASX announcement which declared that Medlab Pathology had been subject to a notifiable cyber incident dating back to February 2022.

As a result, the personal information of around 223,000 patients and staff had been accessed. The majority of those affected are from NSW and Queensland.

This included the individual medical and health records (associated with a pathology test) of 17,539 individuals, 28,286 credit card numbers and individuals’ names (including around 3375 CVV codes) and 128,608 Medicare numbers which were attached to a name.

-----

https://www.smh.com.au/technology/medical-lab-took-five-months-to-disclose-data-breach-20221027-p5btfu.html

Data on dark web months before pathology business told customers

By Nick Bonyhady

Updated October 27, 2022 — 6.06pmfirst published at 2.15pm

Medical testing company Medlab Pathology and its parent, Australian Clinical Labs, took five months after a government warning that customers’ data was on the dark web to tell 223,000 people their personal information had been exposed.

The exposed data includes 17,539 test records; almost 30,000 credit card details, though some are expired; some driver’s licence and passport information; and Medicare card information of 128,000 people.

Optus and Medibank were both pilloried for their communications after their respective cybersecurity breaches, however, both issued repeated updates to customers as soon as they became aware of the intrusion. In contrast, Medlab first detected signs of the hack in February but waited until October to publicly disclose it.

Australia’s corporate and privacy watchdogs, which enforce rules that require prompt disclosure of hacks, are both reviewing the episode. Cybersecurity policy expert Rachael Falk said Medlab should have gone public faster.

-----

https://www.miragenews.com/message-from-amacgp-chair-dr-simon-torvaldsen-883406/

27 Oct 2022 3:55 pm AEDT

Message from AMACGP Chair, Dr Simon Torvaldsen

Australian Medical Association

I have recently taken over the Chair role at the AMA Council of General Practice (CGP). I follow on from well-known Queensland GP Dr Richard Kidd, who was dedicated to this role for over 6 years.

Richard was a very hard working, knowledgeable Chair who worked tirelessly to benefit GPs all over the country. Few outside our Council would know how much work gets done on behalf of Australian GPs, a great deal of it unseen. I often say it is not just the good things you see and judge us by, it is also a lot of really bad things and crazy ideas that we manage to stop and you will fortunately never see.

Time and circumstances move on however and there are some areas where I believe we need to refocus.

General Practice is facing some big challenges at present, but there are also some big opportunities opening up. Over the coming year I want to see your Council focus on the big issues, and the things that can really make a difference to the lives of GPs and our patients. There is always lots of other policy and advocacy work, but over the next year I would like us to see some big changes happening for GP.

-----

https://medicalrepublic.com.au/long-awaited-tech-review-back-on-track/80122

27 October 2022

Long-awaited tech review back on track

By Amanda Sheppeard

Dr Peter Boxall has been replaced as the proposed head of the Health Technology Assessment Review.

Australia’s long-awaited Health Technology Assessment Review appears to be back on track, more than six months after the former Morrison government controversially appointed longstanding PBS critic Dr Peter Boxall to head its proposed reference committee.

Dr Boxall has been dumped from the line-up, with Health Minister Mark Butler announcing the finalised committee would be chaired by Adjunct Professor Debora Picone, who recently retired as CEO of the Australian Commission of Safety and Quality in Health Care.

The announcement has been welcomed by Medicines Australia CEO Elizabeth de Somer, who told The Medical Republic there had been discussion about whether Dr Boxall “was going to be the right person from the stakeholders’ perspective”.

“Mark Butler did commit to review the appointment of Peter Boxall and I think that this been led by the minister’s recognition that there were some challenges in that stakeholder and Medicines Australia consultation on the on the chair, and also some concerns raised by stakeholders about his appointment,” she said.

-----

https://www.miga.com.au/Bulletin/perils-of-social-media-recent-Tribunal-decision

The perils of social media - recent Tribunal decision

25 Oct 2022

Mark Helier Solicitor - Legal Services

A recent Tribunal decision has demonstrated the Medical Board’s desire to send a “strong and clear message” that unacceptable online content posted by practitioners of a serious nature will have serious consequences.
 
In the decision, Medical Board of Australia v Lee [2022] VCAT  667, the Tribunal found that Dr Lee had engaged in professional misconduct resulting in a reprimand, cancelling of his registration and disqualification from applying for registration (totalling 54 months) which, taking account of suspension already served, will be in December 2023.
 
The conduct by Dr Lee had to be extremely serious to warrant this sort of penalty. There were two allegations of professional misconduct, one relating to posts by Dr Lee described by the Tribunal as gruesome images and abhorrent messages and the second relating to confidential patient information on internet forums and social media sites.
 
The judgement provides significantly more detail regarding the allegations. The posts included graphic and gory images. Dr Lee provided commentary about those images. Intimate photographs of Dr Lee’s wife were posted without her consent. The judgement describes the commentary as:

  • Extremely misogynistic which endorsed violence against women, objectifying or humiliating women including Dr Lee’s wife;
  • Xenophobic, racist, bigoted and discriminatory in relation to Muslims, Indian men, Palestinians and Singaporean women;
  • Endorsing violence against women, persons with mental illnesses and physical disabilities.

-----

https://www.agedhealth.com.au/content/technology/news/digital-technology-could-reduce-a-amp-e-attendance-1126489179

Digital technology could reduce A&E attendance


Monday, 24 October, 2022

The use of digital technology in residential care homes can reduce the number of emergency department attendances by 10% each month, according to new research.

Preliminary evidence from a study that modelled the effect of implementing the UK’s National Health Service (NHS) HealthCall digital technology across the North-East of England showed it had the potential to make a significant impact on attendances by residents of care homes in accident and emergency (A&E) departments.

The author of the research, Alex Garner, a Lancaster Medical School PhD student, said, “Care homes that are registered with HealthCall are provided with devices on which the staff can use the app. Staff are trained on taking observations of residents’ condition, such as body temperature and blood pressure, and uploading these observations to the app. They can also include text about a person’s condition. The observations are sent to a clinician at a central hub who has access to the resident’s NHS healthcare record. The clinician can then provide advice for staff on next steps in the resident’s care. The advice might be to keep monitoring the resident, or for a healthcare professional to visit, or to take them to an emergency department.”

Garner and his colleagues collated data on 8702 care home residents in 122 homes from County Durham and Darlington NHS Foundation Trust and linked these with clinical data from HealthCall. Using this information, they created statistical models to predict how rates of A&E attendances changed over time. The models took account of fluctuations caused by the time of year and also the COVID-19 pandemic.

-----

https://www.technologydecisions.com.au/content/security/article/how-can-you-prepare-for-ransomware-attacks--1201478022

How can you prepare for ransomware attacks?

VMware Global Inc

By Darren Reid, Director of the Security Business Unit, VMware, ANZ
Wednesday, 19 October, 2022

If the last weeks have taught security practitioners anything, it’s that no organisation — regardless of size, sector or security budget — is immune to ransomware or the threat of a cyber attack.

In Australia, the healthcare industry has been one of the most targeted, with the Australian Cyber Security Centre (ACSC) stating that ransomware attacks against the Australian healthcare sector are growing. As an example, in 2021 large Australian organisations such as Eastern Health and Melbourne Heart group fell victim to ransomware. Of course, ransomware attacks are not exclusive to the healthcare sector, and VMware’s recent Global IR Threat Report found that over 60% of respondents had encountered ransomware attacks over the past year.

Business leaders and security professionals alike have only become more concerned about ransomware, and rightly so. This is due to a much more complex and broad attack surface than that of a decade ago. In tandem, cybercriminals have taken full advantage of the shift in working styles, becoming more motivated and sophisticated in their attack methods. In fact, the Global IR Threat Report also flagged that ransomware attacks have become increasingly malevolent, with over half of the reported encounters including double-extortion techniques. Furthermore, the Verizon Business 2022 Data Breach Investigations Report found that ransomware increased by 13% over the past year, representing an uptick greater than the past five years combined — with no relief in sight for the next year ahead.

-----

https://womensagenda.com.au/life/health/jamila-rizvi-on-gender-diversity-at-the-brilliant-women-in-digital-health-awards/

Celebrating gender diversity at the Brilliant Women in Digital Health Awards 

At the 2022 Brilliant Women in Digital Health Awards event, 25 women were honoured for their contributions to and achievements in digital health across the health and aged care sectors Australia-wide and abroad.

Guest speaker Jamila Rizvi, Future Women Deputy Managing Director, spoke on the challenges of gender equity and the importance of women claiming their successes to more than 300 guests in Sydney, Melbourne and online.

Calling out the dangers of women’s tendency to put their achievements down to luck, she cited British Supreme Court Judge Baroness Brenda Hale, former Facebook executive Sheryl Sandberg and PepsiCo CEO Ramon Laguarta among others as contributing to an “epidemic of female luckiness”.

She believes the root causes of the ‘luckiness epidemic’ are the expectations from society about how women should behave – to make themselves likeable above everything else. 

Jamila says society’s expectations of women is they be polite, helpful and modest. While ambition is a positive attribute for men, it’s seen as a negative trait for women. 

-----

https://www.miragenews.com/world-class-locally-developed-australias-882144/

26 Oct 2022 10:40 am AEDT

World-class, locally developed: Australia’s largest annual biotech week kicks off

Record numbers of life science delegates attend AusBiotech 2022; strong line-up at AusBioInvest 2022 held in the same week.

Held this year in Perth from 26-28 October, Australia’s ‘biggest week in biotech’ includes AusBiotech 2022, Australia’s largest life science conference attracting more than 1,000 registered attendees, and AusBioInvest, the sector’s premier investment conference with more than 300 registered. The events will feature a wide range of national and international experts and keynote speakers.

Running for more than 37 years, AusBiotech 2022 features an industry-led programme of more than 160 thought leaders across over 40 sessions that will inspire, inform, engage and enhance the biotech community.

It also gives companies a valuable opportunity to meet and connect, creating opportunities to access funding and partnerships to enable the development of world-class therapies, diagnostics and medical devices.

Key highlights include: Professor Fiona Wood AM, Director, Burns Service of WA & Director, Burn Injury Research Unit UWA who will share her story about the revolutionary spray-on skin cells treatment, used to treat burns victims of the Bali Bombings; Professor Marvin Caruthers, Distinguished Professor from the University of Colorado who will share his insights on the biotechnology industry transformation through ground-breaking DNA synthesis chemistry; and Elizabeth Koff AM, Managing Director, Telstra Health who will talk about realising the full potential of our Australian health system.

-----

https://www.theaustralian.com.au/business/technology/medibank-and-ahm-customers-are-being-urged-to-be-on-alert/news-story/8b8231de2f26965ce23bbee5cf729f71

I’m a Medibank customer: What should I do now?

Australians trusted the company with their most sensitive data. Here’s what you can do if you’re a Medibank or ahm customer.

By David Swan

October 26, 2022

A hacker has made away with the personal health information and identity numbers of all of Medibank’s nearly 4 million customers, an attack that is expected to cost the health insurer between $25m and $35m and cause significant stress and inconvenience to millions of Australians who trusted the company with their most sensitive data.

So what can you do if you’re a Medibank or ahm customer?

Aside from relying on support from Medibank and the government there are four basic steps that customers can take to try and stay and safe online as possible.

Steps to take

Enable multi-factor authentication across your email, bank and social media accounts to make it impossible for a hacker to log in with just your password. Multi-factor authentication means a hacker might steal your PIN or password, but they will still need another proof of identity to gain access to your accounts.

-----

https://www.lexology.com/library/detail.aspx?g=ea95c3e0-1103-4b00-8f47-d78176056f3e

How can digital tools help, not hinder, our mental health

Gilbert + Tobin  Katelin SchelksPeter Waters and Anna Belgiorno-Nettis

Australia October 23 2022

The Internet and social media have become fraught spaces for mental health, particularly for youth. In a 2019 project called ‘Selfie Harm’, British photographer Rankin photographed 15 teens and asked them to edit their photos to make them “social media-ready”. The teens dramatically changed the shape of their features, added makeup and/or smoothed out their complexions, making themselves almost unrecognisable. This provided a unique insight into the damaging impact of social media on young people’s self-image.

Then entered COVID-19. The World Health Organisation’s ‘Social Media and COVID-19 Report outlines how the pandemic and lockdowns were not only direct sources of stress, anxiety and isolation, but also increased reliance on social media as life and work activities moved online.

However online spaces can also fill gaps in and augment the provision of mental health services. Digital mental health tools are greatly enhancing current methods of detecting, diagnosing and treating mental health, as well as facilitating the creation of novel methods. They are able to increase the accessibility, affordability, accuracy and speed of the diagnosis and treatment of mental health disorders and increase patient autonomy and sense of responsibility for their own mental health care.

-----

https://www.theaustralian.com.au/nation/fast-track-for-data-shield/news-story/2a32df8a42d63d23dbde4c839668f75c

Fast track for data shield

Jess Malcolm

6:45PM October 25, 2022

Labor will expedite its watershed data and privacy laws as an emergency response to the Medibank data breach, after Australia’s largest private health insurance company revealed that the personal health records of four million current and all its former customers may have been stolen.

Attorney-General Mark Dreyfus is seeking to legislate significantly increased penalties for “serious or repeated” data breaches and to give the Information Commissioner sweeping powers amid concern that current laws are “hopelessly outdated”.

The Australian understands the government on Tuesday was moving to fast-track its privacy laws into the lower house as early as Wednesday morning in response to Medibank’s “distressing development” that its cyber ­attack affecting consumer data was much wider than originally thought.

A fortnight after a major telecommunications data breach at Optus, the insurance provider was forced to defer its premium increases following the cybercrime event, which included theft of data from its Medibank brand.

Previously, the company believed only data from its sub-brand ahm and insurance for international students had been taken. The deferments could cost the company more than $50m.

-----

https://www.afr.com/companies/financial-services/medibank-breach-to-hit-substantially-more-customers-20221026-p5bsxs

Medibank says every customer’s data was accessed

Ayesha de Kretser Senior Reporter

Updated Oct 26, 2022 – 10.22am, first published at 10.05am

Medibank has admitted that every single customer’s data was breached as the insurer’s shares fell 14 per cent after it resumed trading this morning for the first time in a week.

Chief executive David Koczkar said data of all its 3.8 million customers has been accessed by criminals, meaning more than 4 million people could be impacted given the insurer has retained information for past customers.

The insurer is required to keep health records of adults for seven years and children for 25 years.

“Our investigation has now established that this criminal has accessed all our private health insurance customers personal data and significant amounts of their health claims data,” he said.

“As we’ve continued to say we believe that the scale of stolen customer data will be greater and we expect that the number of affected customers could grow substantially.

-----

https://www.afr.com/technology/human-stupidity-likely-cause-of-medibank-optus-breaches-20221025-p5bsqu

‘Human stupidity’ likely cause of Medibank, Optus breaches

John Davidson Columnist

Oct 25, 2022 – 4.51pm

Human error almost certainly played a decisive role in the Medibank, Optus and multitude of other data breaches plaguing Australian companies, one of the world’s top cybersecurity experts said.

Kris Lovejoy, a former chief information security officer at IBM, said very few businesses are taking the necessary steps to prevent data breaches, and yet they’re putting so much pressure on their software developers and data security staff to rapidly roll out new applications that human error has become a major source of cyberattack vulnerability.

“In 99.9 per cent of the incidents that I’ve ever responded to, human stupidity has been a factor,” said Ms Lovejoy, who now leads the global security and resilience practice at Kyndryl, an IT infrastructure services provider that was spun out of IBM last year.

Asked whether companies such as Medibank should be reasonably expected to protect their sensitive data against sophisticated cyberattacks, she said: “I don’t care how sophisticated it might appear, I would bet you one of my kids that there was some sort of mistake that was made, that enabled the attacks to happen.”

-----

https://www.afr.com/technology/privacy-fallout-from-medibank-hack-will-be-widespread-20221023-p5bs75

Privacy fallout from Medibank hack ‘will be widespread’

John Davidson Columnist

Oct 24, 2022 – 3.00pm

Leaks of sensitive healthcare information such as Medibank’s data breach can have far-reaching consequences, not just for the direct victims of the leaks but for all users of Australia’s health system, privacy experts warn.

Last week, Australia’s largest private health insurance company admitted it had as much as 200 gigabytes of data stolen from its servers, including “the location of where a customer received medical services, and codes relating to their diagnosis and procedures”.

Melanie Marks, a principal at the cybersecurity and data privacy consultancy elevenM, said the leak would harm far more than Medibank and its customers.

“When we have a large data leak like that, it has a ripple effect that undermines trust in the whole health system,” she told The Australian Financial Review.

Trust that healthcare data would be protected was crucial to the proper functioning of the healthcare system, which was why healthcare providers such as doctors, nurses and hospitals took great care with patient data, she said.

-----

https://www.afr.com/technology/revealed-how-crooks-got-inside-medibank-20221024-p5bsg4

Revealed: how crooks got inside Medibank

Paul Smith and Ayesha de Kretser

Oct 24, 2022 – 7.00pm

The medical details of up to 3.8 million Australians were taken from the country’s largest private health insurer Medibank, after a criminal stole the login credentials of someone with high-level systems access, and sold them to a separate hacker on a Russian language online forum.

Internal investigators at Medibank have begun piecing together the sequence of events that laid bare its systems to criminals, who now threaten to expose the treatments, ailments and claims of customers, whose records they proved they had stolen.

While investigations inside Medibank, and by the Australian Federal Police are ongoing, The Australian Financial Review understands the view is forming that it involved a relatively straightforward theft of credentials, followed by an intrusion conducted by a more sophisticated operator.

Medibank declined to speak publicly about the nature of the theft, which is understood to have been of credentials of someone with high levels of access to its various systems of record.

Such a theft could occur through any number of methods, such as malware that allows a person’s keystrokes to be logged, or through a phishing and social engineering scam where a person is duped into giving over their details.

-----

https://www.digitalnationaus.com.au/news/federal-government-to-introduce-increased-penalties-for-data-breaches-586860

Federal government to introduce increased penalties for data breaches

By Staff Writer on Oct 24, 2022 1:37PM

(Reuters) - Australia will introduce laws to parliament to increase penalties for companies subject to major data breaches, Attorney-General Mark Dreyfus said, after high-profile cyberattacks hit millions of Australians in recent weeks.

Australia's telco, financial and government sectors have been on high alert since Singtel-owned Optus, the country's second-largest telco, disclosed on September 22 a hack that saw the theft of personal data from up to 10 million accounts.

That attack was followed this month by a data breach at health insurer Medibank Private, which covers one-sixth of Australians, resulting in personal information of 100 customers being stolen, including medical diagnoses and procedures, as part of a theft of 200 gigabytes of data.

Dreyfus, in an official statement issued on Saturday, said the government would next week move to "significantly increase penalties for repeated or serious privacy breaches" with amendments to privacy laws.

-----

https://www.afr.com/technology/why-higher-penalties-for-privacy-breaches-won-t-work-20221023-p5bs5c

Why higher penalties for privacy breaches aren’t enough

While raising fines for data breaches will grab the headlines, companies simply don’t know enough about their data handling practices to keep customer information safe.

Michael Swinson and Kirsten Bowe

Updated Oct 24, 2022 – 10.53am, first published at 12.00am

In the wake of the Optus and Medibank data breaches, a loud chorus has called for an overhaul of Australian privacy laws and for higher penalties to be introduced. The more important discussion should be on compliance.

The focus on penalties is hardly surprising. Successive governments have for several years now been promising to increase fines for breaches of the Privacy Act. Indeed, this week the Albanese government will introduce legislation to increase the maximum penalty for serious or repeated breaches of privacy laws from $2.2 million to the greater of $50 million; three times any benefit obtained from the misuse of data; or 30 per cent of adjusted revenue in the relevant period.

However, what is less often discussed is that the regulator, the Office of the Australian Information Commissioner (OAIC), has hardly ever sought to enforce the existing penalties already available under the Act.

What’s more, while many aspects of the Act could certainly be modernised and improved, it already contains requirements that in theory address the primary concerns raised by the Optus data breach. These include requirements for organisations to only collect personal information that they reasonably need, to take reasonable steps to keep the information they do hold secure, and to delete or de-identify that information when it is no longer needed.

-----

https://itwire.com/government-tech-news/government-tech-policy/govt-to-increase-fines-for-data-breaches-to-$50m,-says-dreyfus.html

Sunday, 23 October 2022 05:23

Govt to increase fines for data breaches to $50m, says Dreyfus Featured

By Sam Varghese

The Federal Government says it will put in place legislation to increase penalties for repeated or serious privacy breaches.

In a statement issued on Saturday, Attorney-General Mark Dreyfus said the fines would rise from the existing $2.22 million to one of three higher amounts.

The government move comes a month after telco Singtel Optus announced a massive breach of its systems.

There have been seven other breaches made public in less than a month, affecting EnergyAustralia, Telstra, G4S, Costa Group, Dialog, MyDeal and Medibank Group.

-----

https://www.itnews.com.au/news/gov-proposes-up-to-50m-fines-for-serious-data-breaches-586802

Gov proposes "up to $50m" fines for serious data breaches

By Ry Crozier on Oct 22, 2022 9:35AM

Under planned changes to privacy laws.

The federal government is set to fast-track changes to Australia’s privacy laws which, if passed, would see fines for "repeated or serious" data breaches rise from $2.2 million to "up to" $50 million or 30 percent of “adjusted” turnover.

Attorney-General Mark Dreyfus said Saturday morning that present penalties for breached organisations were “seen as a cost of doing business”.

"The maximum fine at the moment is $2.2 million, and for a really big company that's just ... something that they can safely ignore," he said.

"What we need is really large penalties that will concentrate the minds of corporations who are storing Australians' data, making sure that in the future they will look after that."

-----

David.

 

2 comments:

Anonymous said...

AMACGP Chair Dr Simon Torvaldson said “The AMA will never support a capitation model of VPE”.

https://www.miragenews.com/message-from-amacgp-chair-dr-simon-torvaldsen-883406/

To me VPE means ’ventricular pre-excitation’

I have no idea what VPE means to him.


Anonymous said...

Voluntary Patient Enrolment