SAI Global GRC Community

GRC COMMUNITY
Building Organizational Integrity.
Blogs >> Privacy and Data Protection

The United Kingdom Information Commissioner's Office (ICO) has made available an enforcement notice (11 June 2013) requiring Google Inc (Google) to destroy discs containing personal data which were mistakenly collected by Google's Street View vehicles.

The Paris Court of Appeals has upheld a ruling requiring Twitter to provide a collective of plaintiffs, including the Union des Etudiants Juifs de France (UEJF) (union of Jewish students of France), with details on users who posted antisemitic material, including a collection of offensive remarks deploying the hashtags #unbonjuif (a good Jew) and #unjuifmort (a dead Jew).

Canadian motorists are increasingly opting to install telematic tracking devices on their cars for insurance purposes. Reportedly, the devices provide information on drivers' habits which can be used by insurers to calculate premiums.

Apple Inc (Apple) has joined other global technology companies including Facebook and Microsoft in revealing details of secret Court Orders requiring it to disclose its customers' information to United States (US) authorities, following recent revelations regarding the collection of user data from private companies under the US National Security Agency's "Prism" program.

Extent of Government Access to Data Revealed

13 Jun 2013
Written by World Watch

The National Security Agency (NSA) is believed to have engaged in a data collection program that commenced in 2007 using the databases of the largest US-based internet companies, including Google and Facebook. Reportedly, details of the previously undisclosed program codenamed "PRISM", were obtained from a leaked slide presentation that was used to train intelligence officials.

Cookie Audit Reveals Only Half Comply

06 Jun 2013
Written by World Watch

KPMG has announced that its analysis of 55 major United Kingdom-based organizations found that 51% did not comply with cookie consent requirements established by Directive 2002/58/EC on privacy and electronic communications. KPMG information protection and business resilience team partner Stephen Bonner stated that while the figure had improved from the 80% recorded in the previous year, the current result "is a pretty patchy response to the law at best".

Australian Attorney-General Mark Dreyfus has announced the introduction of the Privacy Amendment (Privacy Alerts) Bill 2013 (Cth) to federal parliament. According to Mr Dreyfus, the Bill proposes a requirement for businesses and government agencies to "notify people when a data breach [that gives rise to a risk of serious harm and] affect[s] their privacy occurs".

Published in Consumer Protection

Yahoo announced that 22 million login names may have been exposed after a data breach at Yahoo Japan last week. According to a statement released by Yahoo Japan, “We don’t know if the file [containing 22 million user IDs] was leaked or not, but we can’t deny the possibility, given the volume of traffic between our server and external terminals.”

Published in Information Security

Online Search Revealed Telco Customers' Details

23 May 2013
Written by World Watch

The Office of the Australian Information Commissioner (OAIC) has made available a statement (20 May 2013) by Privacy Commissioner Timothy Pilgrim announcing that telecommunications provider Telstra has briefed the OAIC regarding "an incident involving the publication of documents online containing the details of some Telstra customers". Mr Pilgrim stated that he has launched an investigation into whether or not the incident breached the Privacy Act 1988 No. 119 (Cth) (the Act).

The United Kingdom Office of Fair Trading (OFT) has announced that it will contact "over 60 leading online businesses to ensure they are transparent with customers about how they collect and use their data". This follows the release of the OFT's Personalised Pricing: Increasing Transparency to Improve Trust (May 2013) report, which shows that many of the surveyed businesses failed to explain to consumers how their information was collected and used, or how they could protect their privacy.

© 2013 SAI Global Limited ABN 67 050 611 642

Login

LOG IN

Register

User Registration
or Cancel