Data breach notifications submitted for 2019
Dear Office of the Australian Information Commissioner,
I would like to request to receive the data breach notifications submitted for 2019.
Yours faithfully,
Lisa Nagi
Our reference: FOIREQ20/00032
Ms Lisa Nagi
By email: [1][FOI #6132 email]
Freedom of information request – FOIREQ20/00032
Dear Ms Nagi,
I refer to your request for access to documents made under the Freedom of
Information Act 1982 (Cth) (the FOI Act) and received by the Office of the
Australian Information Commissioner (OAIC) on 6 February 2020.
Scope of your request
In your email you seek access to the following:
I would like to request to receive the data breach notifications submitted
for 2019.
Timeframes for dealing with your request
Section 15 of the FOI Act requires this office to process your request no
later than 30 days after the day we receive it. However, section 15(6) of
the FOI Act allows us a further 30 days in situations where we need to
consult with third parties about certain information, such as business
documents or documents affecting their personal privacy.
As we received your request on 6 February 2020, we must process your
request by 9 March 2020.
Disclosure Log
Documents released under the FOI Act may be published online on our
disclosure log, unless they contain personal or business information that
would be unreasonable to publish.
If you would like to discuss this matter please contact me on my contact
details set out below.
Kind regards
Delaney
[2]O A I C logo Delaney Smith | Legal
Services Officer
Legal Services
Office of the Australian
Information Commissioner
GPO Box 5218 Sydney NSW 2001 |
[3]oaic.gov.au
+61 2 9284 9606 |
[4][email address]
[8]Subscribe [9]Subscribe to
[5]Facebook | [6]LinkedIn | [7]Twitter | icon Information
Matters
P Please consider the environment before printing this email.
References
Visible links
1. mailto:[FOI #6132 email]
2. https://www.oaic.gov.au/
3. http://www.oaic.gov.au/
4. mailto:[email address]
5. http://www.facebook.com/OAICgov
6. https://www.linkedin.com/company/office-...
7. https://twitter.com/OAICgov
9. https://www.oaic.gov.au/media-and-speech...
Our reference: FOIREQ20/00032
Dear Ms Nagi
I refer to your FOI request to the Office of the Australian Information
Commissioner received 6 February 2020. Please find attached correspondence
relating to your request.
Kind regards
Delaney
[1]O A I C logo Delaney Smith | Legal
Services Officer
Legal Services
Office of the Australian
Information Commissioner
GPO Box 5218 Sydney NSW 2001 |
[2]oaic.gov.au
+61 2 9284 9606 |
[3][email address]
[7]Subscribe [8]Subscribe to
[4]Facebook | [5]LinkedIn | [6]Twitter | icon Information
Matters
P Please consider the environment before printing this email.
References
Visible links
1. https://www.oaic.gov.au/
2. http://www.oaic.gov.au/
3. mailto:[email address]
4. http://www.facebook.com/OAICgov
5. https://www.linkedin.com/company/office-...
6. https://twitter.com/OAICgov
8. https://www.oaic.gov.au/media-and-speech...
Dear Office of the Australian Information Commissioner,
Please pass this on to the person who conducts Freedom of Information reviews.
I am writing to request an internal review of Office of the Australian Information Commissioner's handling of my FOI request 'Data breach notifications submitted for 2019'.
Can I revise the request for the time from of September 1, 2019 - December 31, 2019?
A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.righttoknow.org.au/request/d...
Yours faithfully,
Lisa nagi
Our reference: FOIREQ20/00032
Ms Lisa Nagi
By email: [1][FOI #6132 email]
Freedom of information request – FOIREQ20/00032
Dear Ms Nagi,
I refer to your request for access to documents made under the Freedom of
Information Act 1982 (Cth) (the FOI Act) and received by the Office of the
Australian Information Commissioner (OAIC) on 6 February 2020.
Scope of your request
In your original request you sought access to the following:
the data breach notifications submitted for 2019.
The OAIC advised you that the scope of your request equated to over 980
notifications and that it would take at least 1860 hours to process. You
revised the scope of your request to the following information:
[data breach notifications] from September 1, 2019 –
December 31, 2019
From 1 September 2019 to 31 December 2019 the OAIC received some 360
Notifiable Data Brach notifications. The reduced scope would still take
approximately 31 working weeks to process. This will still be an
unreasonable diversion of resources.
The OAIC has recently published our Notifiable Data Breaches Report:
July-December 2019 and the report is available on the [2]OAIC website. The
report may have the information you are seeking access to.
If you still wish to proceed with your request, the scope of your request
will need to be narrowed further. My contact details ae provided below if
you wish to call to discuss your request. Otherwise you can email me with
a revised scope that the OAIC may be able to process. If I do not hear
from you before Tuesday 17th March 2020 I will take your request as
withdrawn.
Kind regards
Delaney
[3]O A I C logo Delaney Smith | Legal
Services Officer
Legal Services
Office of the Australian
Information Commissioner
GPO Box 5218 Sydney NSW 2001 |
[4]oaic.gov.au
+61 2 9284 9606 |
[5][email address]
[9]Subscribe [10]Subscribe to
[6]Facebook | [7]LinkedIn | [8]Twitter | icon Information
Matters
P Please consider the environment before printing this email.
References
Visible links
1. mailto:[FOI #6132 email]
2. https://www.oaic.gov.au/privacy/notifiab...
3. https://www.oaic.gov.au/
4. http://www.oaic.gov.au/
5. mailto:[email address]
6. http://www.facebook.com/OAICgov
7. https://www.linkedin.com/company/office-...
8. https://twitter.com/OAICgov
10. https://www.oaic.gov.au/media-and-speech...
Dear Office of the Australian Information Commissioner,
Please pass this on to the person who conducts Freedom of Information reviews.
I am writing to request an internal review of Office of the Australian Information Commissioner's handling of my FOI request 'Data breach notifications submitted for 2019'.
Can I change this request to Data breach notifications sent in February of 2020? Considering the amount of time i'm assuming this will take, this makes the most sense for my needs. Thanks.
A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.righttoknow.org.au/request/d...
Yours faithfully,
Lisa nagi
Our reference: FOIREQ20/00032
Dear Ms Nagi
I refer to your request for access to documents made under the Freedom of
Information Act 1982 (Cth) (the FOI Act) and received by the Office of the
Australian Information Commissioner (OAIC) on 6 February 2020.
Scope of your request
In your revised scope of your request you sought access to the following
information:
[data breach notifications] from September 1, 2019 –
December 31, 2019
The OAIC advised you that from 1 September 2019 to 31 December 2019 the
OAIC received some 360 Notifiable Data Brach notifications and that the
reduced scope would still take approximately 31 working weeks to process
and was still be an unreasonable diversion of resources.
Thank you for further revising your scope on 12 March 2020. You now seek
access to:
Data breach notifications sent in February of 2020
The term ‘Data Breach Notifications’ apply to two categories of data
breaches: Voluntary Data Breach notifications and Eligible Data Breach
notifications which are subject to the Notifiable Data Breach provisions
in the Privacy Act 1988 (Cth) (Privacy Act).
In February 2020, the OAIC received 84 Eligible Data Breach notifications
and 20 Voluntary Data Breach notifications. This equates to 104
notifications received in February 2020. Working on the premise that you
seek access to the Eligible Data Breach notifications only, processing
your request will take approximately 147 hours or four (4) working weeks.
This will still be considered an unreasonable diversion of resources.
If you still wish to proceed with your request, the scope of your request
will need to be narrowed further. You may wish to consider:
o specifying a shorter timeframe, or
o specifying a range of number of affected individuals, or
o identifying the kind of personal information involved, or
o specifying the source of the data breach, or
o any combination of the above.
My contact details are provided below if you wish to call to discuss your
request. Otherwise you can email me with a revised scope that the OAIC may
be able to process. If I do not hear from you before Friday 20th March
2020 I will take your request as withdrawn.
Kind regards
Delaney
[1]O A I C logo Delaney Smith | Legal
Services Officer
Legal Services
Office of the Australian
Information Commissioner
GPO Box 5218 Sydney NSW 2001 |
[2]oaic.gov.au
+61 2 9284 9606 |
[3][email address]
[7]Subscribe [8]Subscribe to
[4]Facebook | [5]LinkedIn | [6]Twitter | icon Information
Matters
P Please consider the environment before printing this email.
References
Visible links
1. https://www.oaic.gov.au/
2. http://www.oaic.gov.au/
3. mailto:[email address]
4. http://www.facebook.com/OAICgov
5. https://www.linkedin.com/company/office-...
6. https://twitter.com/OAICgov
8. https://www.oaic.gov.au/media-and-speech...
Dear Ms Nagi
I refer to your FOI request to the Office of the Australian Information
Commissioner received 6 February 2020. Please find attached correspondence
relating to your request.
Kind regards
Delaney
[1]O A I C logo Delaney Smith | Legal
Services Officer
Legal Services
Office of the Australian
Information Commissioner
GPO Box 5218 Sydney NSW 2001 |
[2]oaic.gov.au
+61 2 9284 9606 |
[3][email address]
[7]Subscribe [8]Subscribe to
[4]Facebook | [5]LinkedIn | [6]Twitter | icon Information
Matters
P Please consider the environment before printing this email.
References
Visible links
1. https://www.oaic.gov.au/
2. http://www.oaic.gov.au/
3. mailto:[email address]
4. http://www.facebook.com/OAICgov
5. https://www.linkedin.com/company/office-...
6. https://twitter.com/OAICgov
8. https://www.oaic.gov.au/media-and-speech...