Date: Thu, 03 May 2018 09:55:13 +0000
Subject: Freedom of Information request - Documents relating to notification of privacy breach by Commonwealth Bank (CBA) to OAIC and OAIC’s advice to CBA that it did not intend to inquiryi.
From: Verity Pane <[FOI #4555 email]>
To: Enquiries <[email address]>

Dear Office of the Australian Information Commissioner,

Jenny Noyes, a journalist with Fairfax Media, had her article published by Fairfax Media on 2 May 2018, about 20 million bank account records having been ‘lost’ by the Commonwealth Bank (CBA) in 2016, circumstances that CBA could not verify had not fallen into third party hands.

In that article Ms Jenny Noyes writes:

“CBA says it discussed the decision not to inform customers with the Office of the Australian Information Commissioner, and that OAIC advised it would not pursue the issue further.

But this week, the OAIC [after having been contacted by the media about the privacy breach] contacted CBA again, requesting additional information on the matter and the course of action undertaken by the bank”

Under FOI I seek copy of the RESOLVE case management record that relates to this enquiry/notification by CBA to the OAIC.

I also seek separately copy of any document from the OAIC to the CBA that advises the CBA of the OAIC’s views on this breach (especially the referred to advice that the OAIC “would not pursue the issue further” and requests from the OAIC to the CBA for indormation or documents relating to the circumstances of this breach/notification).

If there are any internal executive briefings to the Commissioner on the CBA privacy breach, I seek copy of that too.

Yours faithfully,

Verity Pane

-------------------------------------------------------------------

Please use this email address for all replies to this request:
[FOI #4555 email]

Is [OAIC request email] the wrong address for Freedom of Information requests to Office of the Australian Information Commissioner? If so, please contact us using this form:
https://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.righttoknow.org.au%2Fchange_request%2Fnew%3Fbody%3Doaic&data=01%7C01%7Cenquiries%40oaic.gov.au%7C83d602289a624bbde1a808d5b0dbf7c7%7Cea4cdebd454f4218919b7adc32bf1549%7C1&sdata=xb6SewqZje%2B8fIoP8Uu4IcbWaVvfRf44iNDoC1ekZWc%3D&reserved=0

This request has been made by an individual using Right to Know. This message and any reply that you make will be published on the internet. More information on how Right to Know works can be found at:
https://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.righttoknow.org.au%2Fhelp%2Fofficers&data=01%7C01%7Cenquiries%40oaic.gov.au%7C83d602289a624bbde1a808d5b0dbf7c7%7Cea4cdebd454f4218919b7adc32bf1549%7C1&sdata=cFGe5ERxqjUzPh%2BgS3kcBae3bgKIE6Q8ZzsTfJXY594%3D&reserved=0

If you find this service useful as an FOI officer, please ask your web manager to link to us from your organisation's FOI page.


-------------------------------------------------------------------