Catherine Rowe

The Office of the Australian Information Commissioner is set to conduct a targeted review of businesses’ privacy policies in the new year. https://lnkd.in/gqVkyaDF

1

Great to see 𝗪𝗲𝘀𝘁𝗲𝗿𝗻 𝗔𝘂𝘀𝘁𝗿𝗮𝗹𝗶𝗮 taking a major leap forward in privacy and information governance with the launch of the new 𝗢𝗳𝗳𝗶𝗰𝗲 𝗼𝗳 𝘁𝗵𝗲 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗖𝗼𝗺𝗺𝗶𝘀𝘀𝗶𝗼𝗻𝗲𝗿 𝗼𝗻 𝟭 𝗝𝘂𝗹𝘆 𝟮𝟬𝟮𝟱. This marks an important shift in how security, privacy, and data-handling expectations are set across the public sector. 𝗣𝗹𝗲𝗮𝘀𝗲𝗱 𝘁𝗼 𝘀𝗵𝗮𝗿𝗲 𝘁𝗵𝗮𝘁 𝘁𝗵𝗲 𝗻𝗲𝘄 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗖𝗼𝗺𝗺𝗶𝘀𝘀𝗶𝗼𝗻𝗲𝗿, 𝗔𝗻𝗻𝗲𝗹𝗶𝗲𝘀 𝗠𝗼𝗲𝗻𝘀, will be speaking at #PerthSEC — offering valuable insights into the new legislation, information privacy principles, the notifiable information breach scheme, and the public perception of Freedom of Information (FOI) in WA. 𝗔 𝘀𝘁𝗿𝗼𝗻𝗴 𝗿𝗲𝗺𝗶𝗻𝗱𝗲𝗿 𝘁𝗵𝗮𝘁 𝗽𝗿𝗶𝘃𝗮𝗰𝘆, 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆, 𝗮𝗻𝗱 𝗱𝗮𝘁𝗮 𝗴𝗼𝘃𝗲𝗿𝗻𝗮𝗻𝗰𝗲 𝗺𝘂𝘀𝘁 𝗼𝗽𝗲𝗿𝗮𝘁𝗲 𝗵𝗮𝗻𝗱-𝗶𝗻-𝗵𝗮𝗻𝗱 𝘁𝗼 𝘀𝘁𝗿𝗲𝗻𝗴𝘁𝗵𝗲𝗻 𝘁𝗿𝘂𝘀𝘁, 𝘁𝗿𝗮𝗻𝘀𝗽𝗮𝗿𝗲𝗻𝗰𝘆, 𝗮𝗻𝗱 𝗮𝗰𝗰𝗼𝘂𝗻𝘁𝗮𝗯𝗶𝗹𝗶𝘁𝘆. #privacy #trust #accountability #cyber #aisa #aisawa #informationsecurity #WA #PerthSEC #datagovernance #cyberawareness #infosec #publicsector #securitycompliance #riskmanagement #dataprotection #westernAustralia

14

1 Comment

🎙️LISTEN NEW DATA DIVA TALKS PRIVACY PODCAST EPISODE🎙️ Introducing 🎙️ The Data Diva Talks Privacy Podcast – Episode 274 Liz MacPherson Deputy Privacy Commissioner, Office of the Privacy Commissioner, New Zealand In this episode, Liz and I explore why privacy is not an obstacle to innovation, but one of its most important enablers. We dive into how New Zealand approaches biometric governance, facial recognition, and data protection through purpose, context, and proportionality rather than consent theater. We discuss: 🔐 Why privacy guardrails allow innovation to move faster and safer 🧠 The risks of facial recognition and why it is not a plug-and-play technology 🏪 A real-world supermarket case study involving biometric trials and independent evaluation ⚖️ How purpose, necessity, and proportionality shape lawful data use in New Zealand 📊 Why effectiveness testing matters before deploying high-risk technologies 👁️ The dangers of inference, misidentification, and bias in biometric systems 🗑️ Why data retention is the sleeping giant of cybersecurity risk 🌱 How putting people at the center of data decisions builds long-term trust 🎧 Listen to the full episode here: https://lnkd.in/gJRyY-4G About The Data Diva Talks Privacy Podcast: This award-winning podcast has been downloaded over 1 million times and reaches listeners in 158 countries. Each week, I speak with global leaders on data privacy, cybersecurity, AI, and emerging technology, sharing insights businesses need to retain value, reduce risk, and increase revenue. Become an insider. Join Data Diva Confidential for data strategy and data privacy insights delivered to your inbox. 💡 Expert briefings, practical guidance, and exclusive resources you will not find anywhere else. 👉 Join here: http://bit.ly/3Jb8S5p Debbie Reynolds Debbie Reynolds Consulting, LLC #DataPrivacy #Biometrics #FacialRecognition #Trust #AI #Governance #PrivacyLeadership #DataDiva

39

3 Comments

𝗥𝗲𝗮𝗹 𝗘𝘀𝘁𝗮𝘁𝗲’𝘀 𝟮𝟬𝟮𝟲 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 + 𝗔𝗠𝗟 𝗥𝗲𝗰𝗸𝗼𝗻𝗶𝗻𝗴 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 𝗶𝘀 𝗻𝗼 𝗹𝗼𝗻𝗴𝗲𝗿 𝗮 𝗯𝗮𝗰𝗸-𝗼𝗳𝗳𝗶𝗰𝗲 𝘁𝗮𝘀𝗸 𝗳𝗼𝗿 𝗿𝗲𝗮𝗹 𝗲𝘀𝘁𝗮𝘁𝗲 𝗮𝗴𝗲𝗻𝗰𝗶𝗲𝘀. ✨ ———————————————————— ✨ With OAIC privacy policy compliance sweeps underway and Privacy Act 1988 (Cth) reforms tightening Australian Privacy Principles and Notifiable Data Breaches expectations, agencies must uplift how they collect, store and dispose of property and client data. At the same time, incoming AML/CTF Tranche 2 reforms will extend KYC and record-keeping obligations to real estate, raising the bar on identity handling. Consider a common pattern: applications and 100-point ID are emailed to a shared inbox, then saved to a general drive. Months later, a former contractor still has access and a supplier email compromise exposes passports. The result? NDB notifications, delayed settlements and leases, forensic costs, and heightened AUSTRAC scrutiny over onboarding controls. Leaders are balancing thin margins, fragmented CRMs, and rising client expectations for fast, secure onboarding. The risk sits in the gaps—legacy folders, shadow spreadsheets, and vendor access that was never revoked. Action to take this week: complete a rapid data map and retention schedule across CRM, property management systems, file shares and email, and align destruction/de-identification to APP 11.2. This single exercise drives access hardening, vendor scoping, and privacy notice updates. If any of this raises questions about document control, change management, or compliance alignment, I’m happy to talk it through. You can message me here, or find us at tkodocs.com. Helpful Links: https://lnkd.in/gkVFEaWs https://lnkd.in/guPYKFEA https://lnkd.in/gsq83a7j More Information Here: https://lnkd.in/guR7vc5m

1