Notes from the IAPP Asia Managing Director, 23 June 2017

(Jun 22, 2017) If you ask most people old enough to remember, they will know exactly where they were and what they were doing the day the Berlin Wall came down. That year, 1989, was, according to eminent author and economist Stephen D. King, “peak enthusiasm” for globalization: when we thought more about a collective “us” rather than “us versus them.” Personally, I felt strongly at that point that the world was going to get better. I was young and foolish, and my euphoria did not last. I attended today a lect... Read More

Samantha Gavel named NSW privacy commissioner

(Jun 22, 2017) Samantha Gavel will take over the position of New South Wales privacy commissioner from Elizabeth Coombs, The Mandarin reports. Gavel is currently the national health practitioner ombudsman and privacy commissioner. She had previously held the position of private health insurance ombudsman for six years. “She has extensive experience in raising awareness about privacy rights, investigating complaints, resolving disputes and helping agencies meet their obligations to protect the personal informat... Read More

Chinese cities using facial-recognition tech to punish jaywalkers

(Jun 22, 2017) Several Chinese cities are using facial-recognition software to penalize jaywalkers, but some are concerned the technology is violating pedestrians’ privacy, the Hong Kong Free Press reports. Jiangbei, Jinan and Suqian are among the cities using the technology. The system in Jinan takes a photo of a jaywalker’s face and uploads their personal information into the police system, including the offender’s name, age, headshot, address and part of their ID number. Privacy concerns have emerged as the... Read More

Report: Data breaches cost Australian businesses AU$2.51M

(Jun 22, 2017) A report from IBM and the Ponemon Institute found data breaches cost Australian organizations AU$2.51 million on average, ZDNet reports. “The 2017 Cost of Data Breach Study: Australia” examined 25 Australian organizations after they suffered a data breach. The report found a data breach compromised an average of 18,556 records, with 48 percent of data breaches resulting from malicious actors and 28 percent coming from employee negligence. The report found IT security complexity was the main fact... Read More

DGA releases Code of Practice draft for data use

(Jun 22, 2017) Data Governance Australia has released a Code of Practice draft for public consultation designed to set industry standards for collecting, using, managing and disclosing data, ZDNet reports. The draft code focuses on ensuring “no harm” is done to the customers by taking the proper steps to make sure data cannot be re-identified and for companies not to use data for unethical purposes. The second principle in draft code focuses on data transparency. “Organisations must be clear and upfront about ... Read More

Singapore DPA fines company for poor security arrangements

(Jun 22, 2017) On its website, Singapore's Personal Data Protection Commission announced it levied a $3,000 fine on data intermediary DataPost "for failing to make reasonable security arrangements to prevent the unauthorised disclosure of the personal data of two customers of a bank." The regulator also directed the company to "review its working procedures relating to data printing and enveloping operations, improve the training of its staff, and review its personal data protection policy." In related news, t... Read More

Roundup: Canada, Turkey, EU, US and more

(Jun 19, 2017) In this week’s Privacy Tracker legislative roundup, read about how Canada’s House of Commons committee has approved a long-awaited border preclearance bill, despite concerns from the federal privacy commissioner, and the private-right-of-action in Canada’s Anti-Spam Legislation was suspended. Turkey’s draft Regulation on the Deletion, Destruction and Anonymisation of Personal Data was released for public comment. The EU’s Article 29 Working Party issued a press release on its preparations for th... Read More

Global News Roundup — June 12–19, 2017

(Jun 19, 2017) In this week’s Privacy Tracker legislative roundup, read about how Canada’s House of Commons committee has approved a long-awaited border preclearance bill, despite concerns from the federal privacy commissioner, and the private-right-of-action in Canada’s Anti-Spam Legislation was suspended. Turkey’s draft Regulation on the Deletion, Destruction and Anonymisation of Personal Data was released for public comment. The EU’s Article 29 Working Party issued a press release on its preparations for th... Read More

South Korea joins APEC Cross-Border Privacy Rules system

(Jun 16, 2017) Earlier this week, South Korea became the fifth country to join the Asia-Pacific Economic Cooperation Cross-Border Privacy Rules system. The Ministry of the Interior and the Korea Communications Commission made the announcement June 12. The CBPR framework features principles and implementation guidelines for bolstering privacy protections and diminishing barriers to data flows among the APEC member economies. In addition to Canada, Japan, Mexico, South Korea and the United States, nearly two doz... Read More

Notes from the iappANZ, 16 June 2017

(Jun 15, 2017) Kia Ora from Aotearoa, the beautiful Maori-language name for New Zealand. It translates poetically to "warm greetings from the land of the long white cloud." Looking out my window today, the long white cloud is looking a bit grey, but in true kiwi style, we have our sporting prowess to keep us smiling, despite the weather. Last time I checked, Team New Zealand was leading the way in the America’s Cup series against Oracle Team, and our provincial rugby teams were doing their bit to keep the tou... Read More