SAI Global GRC Community

GRC COMMUNITY
Building Organizational Integrity.
Privacy and Data Protection

The Office of the Australian Information Commissioner (OAIC) has announced its participation in the first global International Internet Privacy Sweep along with 18 other privacy enforcement authorities. According to the OAIC, the Global Privacy Enforcement Network initiative will require an audit of each country's most popular websites to determine the accessibility and readability of their privacy policies.

The United States (US) Department of Homeland Security has issued a warning to corporations to be wary of cyberattacks. Reportedly, the objective of recent attacks has been to gain control of an organisation's networks or processes rather than to obtain data or trade secrets. According to the New York Times, senior officials warned the latest spate of attempted attacks targeted the administration systems of up to ten American energy companies.

Bloomberg chief executive officer Danial Doctoroff has released a statement regarding concerns raised by subscribers to its news service that Bloomberg journalists had access to subscriber data through "Bloomberg Terminals" installed by subscribers. Mr Doctoroff stated that "[a]lthough we have long made limited customer relationship data available to our journalists, we realize this was a mistake" and that the company "took immediate action" to rectify the situation.

Loblaw Launches Digital Loyalty Program

08 May 2013
Written by World Watch

Loblaw Companies Ltd (Loblaw) has launched its digitally based rewards program PC Plus in a bid to eventually eliminate its production of print flyers. According to The Globe and Mail, Loblaw president Vicente Trius believes that "eventually all flyers are going digital" and that switching to a digital platform will reap "substantial" savings.

The United Kingdom Information Commissioner's Office (ICO) has made available an undertaking (undated) which requires County Armagh based general practice The Burnett Practice (the Practice) to make changes to its handling of patient information after an ICO investigation found that the Practice had breached the Data Protection Act 1998.

The United Kingdom Information Commissioner's Office (ICO) has made available a letter (undated) addressed to professionals, customers and others related to the private investigation industry, announcing its campaign to "shin[e] a light into the darkest corners of the industry".

The United States (US) Federal Trade Commission (FTC) has made available a final order (29 April 2013) settling allegations that umbilical cord blood and umbilical cord tissue banking services provider Cbr Systems Inc (Cbr) "failed to protect the security of customers' personal information and that its inadequate security practices led to a breach that exposed the [s]ocial [s]ecurity numbers and debit and credit card information of nearly 300,000 consumers". The matter relates to an incident in 2010 in which property containing consumers' personal information was stolen from the car of a Cbr employee.

The Office of the Australian Information Commissioner (OAIC) has announced that Privacy Awareness Week commenced on 29 April 2013. Privacy Commissioner Timothy Pilgrim stated that Privacy Awareness Week was particularly significant, considering upcoming changes to the Privacy Act 1988 No. 119 (Cth) (the Privacy Act), and urged "private sector organisations and agencies to consider where they are at with preparations for the new laws". Mr Pilgrim added that "[e]arly preparation is definitely going to be key for compliance with the new requirements".

Companies to Reward Hackers for Security Alerts

02 May 2013
Written by World Watch

An increasing number of companies are participating in programs that reward computer experts for exposing security issues in their online assets. Australia-based supermarket chain Coles has reportedly agreed to pay a bounty to individuals who are able to exploit security bugs in its online applications and protocols, while companies such as Rabobank, BigCommerce and Google have already participated in the program.

Hacker Arrested Over Government Website Breach

02 May 2013
Written by World Watch

Information technology security professional Matthew Flannery has been arrested in relation to a breach of a government website. Mr Flannery has also reportedly claimed to be a leader of hacking group LulzSec, which is accused of numerous high profile cyber-attacks.

Page 1 of 21

© 2013 SAI Global Limited ABN 67 050 611 642

Login

LOG IN

Register

User Registration
or Cancel