PRIVACY – breach of privacy – unauthorised access of personal information – inadequate data protection systems – breach of Australian Privacy Principles – ss 13 and 15 of Privacy Act 1988 (Cth) – investigation of representative complaint – earlier representative complaint – construction of ss 36, 38 and 39 of the Act – whether s 39 precludes investigation of subsequent representative complaint – preclusion decision made by the Australian Information Commissioner – whether an error of law – judicial review proceedings – s 5(1) of Administrative Decisions (Judicial Review) Act 1977 (Cth) – ss 39B(1) and (1A) of Judiciary Act 1903 (Cth)
Related cases
-
Australian Securities and Investments Commission v FIIG Securities Limited [2026] FCA 92
CORPORATIONS – Financial services licence – ASIC sought declaration under s 1317E(1) of the Corporations Act 2001 (Cth) (Corporations Act) in respect of admitted contraventions of s 912A of the Corporations Act – ASIC sought orders imposing a pecuniary penalty in an agreed sum – where defendant was subject to a cyber attack as a…
-
Australian Information Commissioner v Australian Clinical Labs Limited (No 2) [2025] FCA 1224
PRIVACY ACT – Where an APP entity breached Australian Privacy Principle (APP) 11.1 of the Privacy Act 1988 (Cth) (Act) by failing to take reasonable steps to protect personal information from unauthorised access or disclosure – what constitutes “reasonable steps” – where an APP entity interfered with the privacy of 223,000 individuals under s 13(1)…
-
Australian Information Commissioner v Australian Clinical Labs Ltd (No 2) [2025] FCA 1224
PRIVACY ACT – Where an APP entity breached Australian Privacy Principle (APP) 11.1 of the Privacy Act 1988 (Cth) (Act) by failing to take reasonable steps to protect personal information from unauthorised access or disclosure – what constitutes “reasonable steps” – where an APP entity interfered with the privacy of 223,000 individuals under s 13(1)…
