The Australian Privacy Commissioner has accepted ARC Mercantile’s enforceable undertaking after the company breached customer data in late 2015, ZDNet reports. An ARC employee began the incident when it posted the information online of an estimated 31,150 customers owing money to Optus, the report states. The undertaking requires ARC to improve “information security within three months, including establish a secure Digital Rights Management Server; implement privacy training for its staff members within three months; pledge to not repeat the conduct that led to the incident; and offer to reimburse the cost of a 12-month credit-monitoring alert service within 14 days for those whose personal information was breached during the incident,” among other mandates, the report states.
Full Story