@Old_IT_geek [preface: will not subvert paywalls, and do not read SMH except for DA's cryptic on Friday]

The exemption of people and organisations is such a tricky thing.
See the profoundly fabulissimo Anne Twomey here: https://youtu.be/Dt6p9c0vrt8?t=455

If we say that many Bretheren volunteered (as people) to the Liberal Party of Australia (a political party, excluded from the Privacy Act) then we are firmly in "Nothing to see here people" territory.

[oh well]

I wonder though:
#whatIf the data were handed to the Bretheren (an organisation) WITHOUT A CONTRACT with the Liberal Party of Australia?

Maybe then we are in interesting territory?

The Bretheren would not be 'subcontractors', nor 'volunteers' for the purposes of the Privacy Act, but just plain-old members of an organisation, on the face of it, subject to the Privacy Act as a section 6C 'organisation'.

I wonder if a Senator (sickem Rex) might ask to see that contract next time the Senate sits?

#Meta to set up $50M #privacy payment scheme to settle #Australian proceeding

Meta has agreed to a $50 million payment program to settle a long-running proceeding in #Australia related to misuse of information for #politicalad targeting, the country’s information watchdog #OAIC announced Tuesday.

https://techcrunch.com/2024/12/17/meta-to-set-up-50m-privacy-payment-scheme-to-settle-australian-proceeding/?guccounter=1

Bunnings Facial Recognition Breach Ruling Sparks Privacy Concerns in Australia https://thecyberexpress.com/bunnings-facial-recognition-tech-australia/ #TheCyberExpressNews #facialrecognition #CyberEssentials #TheCyberExpress #FirewallDaily #Compliance #CyberNews #Australia #Bunnings #Privacy #OAIC #FRT #AI

The privacy regulator is investigating I-MED for giving private medical scans of hundreds of thousands of Australians to a tech startup to train their AI. No consent was sought from patients.

Stern finger wag and limp slap on the wrist to follow

https://archive.is/EAuKI

Tonight it's time for an update, a rather frusrating one I have to admit:

#BucketE and #BucketG just have been reported to #AWS #security tonight

Both where reported to their corresponding CERTs, but those did not even answer.

#BucketF was reported to the australian "Office of the Australian Information Commissioner" #OAIC on the 8th of September. Today I got the answer, that they will not be able to help, as they do not know how is responsible and also do not have any possibility to find it out. The email was sent from "noreply@..." so they also do NOT want any help in this regard.

12.9 Million Australians Impacted in MediSecure Data Breach https://thecyberexpress.com/12-9-million-australians-impacted-in-medisecure-data-breach/ #largesthealthcaredatabreach #MediSecuredatabreach #TheCyberExpressNews #CybersecurityNews #CyberEssentials #TheCyberExpress #DataBreachNews #FirewallDaily #databreach #MediSecure #Australia #OAIC #ASD

Why does the OAIC even exist?

#Privacy #Medibank #AusPol #OAIC #Spinelessbureacrats

https://www.smh.com.au/business/companies/medibank-hack-victims-compensation-in-limbo-due-to-unexpected-hurdle-20230414-p5d0gx.html