Australian Privacy Commissioner recognises Telstra breach

[altonius <altonius () gmail com>]

Following his investigation into the matter, the Privacy Commissioner
concluded that:

    Telstra had breached NPP 2 by disclosing the personal information
of some of its customers to unauthorised third parties
    Telstra was not in breach of NPP 4 as the Commissioner was
satisfied that this incident occurred due to human error rather than
any systemic failure of Telstra’s processes or procedures.

While the Privacy Commissioner found Telstra had breached NPP 2, in
light of the information provided and the steps taken by Telstra, he
decided to cease the OAIC’s own motion investigation on the grounds
that Telstra has adequately dealt with the matter. The investigation
was closed on 16 May 2011.

http://www.oaic.gov.au/publications/reports/own_motion_telstra_May_2011.html
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Learn encryption strategies that manage risk and shore up compliance.
Download Article 1 of CREDANT Technologies' The Essentials Series:
Endpoint Data Encryption That Actually Works
http://credant.com/campaigns/realtime2/gap-LP1/