Government data breach reports from 2020
Dear Office of the Australian Information Commissioner,
I request access to the following documents under the Freedom of Information Act 1982:
1. Data breach reports for the period 1 January 2020 to 1 March 2024 where the respondents' sector is government (local, state, and federal government).
o The document I require is similar to document 52 released in FOIREQ24/00047.
+ If it is not too much trouble, please include dates in the report.
o Respondent names are to be included in the scope of this request.
Since three‑quarters (74%) of Australians feel data breaches are one of the biggest privacy risks they face today, it goes without saying that there is significant public interest in favour of disclosure.
Yours faithfully,
CR
Your email has been received by the Office of Australian Information
Commissioner.
FOI requests to the OAIC
Please note that this email address is only used for making requests to
obtain access to a document held by the OAIC pursuant to the Freedom of
Information Act 1982 (Cth) (FOI Act). We will only action and respond to
emails making FOI requests to the OAIC. For information on how to make an
FOI request to the OAIC, and to ensure that your request complies with the
requirements of the FOI Act, please refer to the FOI page on the OAIC’s
website at:
[1]https://www.oaic.gov.au/about-us/access-...
Once your request has been assessed by the OAIC, and registered on our
system, a separate acknowledgement email will be sent to you with a
reference number.
The OAIC does not hold all documents of other Commonwealth government
agencies, other state government agencies, or private organisations.
Accordingly:
1) if you are seeking to access documents of a particular Commonwealth
agency, you will need to make your request directly to the relevant
agency. For example, if you are requesting a copy of your visa records,
please make an FOI request and send it to the Department of Home Affairs.
2) if you are seeking to access documents of a state or local
government agency, as each Australian state and territory also have
separate FOI legislation that governs information held by state government
agencies, please contact the relevant agency as to how to make an
application to access the documents. For example, if you are seeking
access to police report from NSW Police Force, it is governed by the
Government Information (Public Access) Act 2009 (NSW) (GIPA Act), and you
will need to contact NSW police to find out how to make a GIPA application
for the police report.
3) if you are seeking to access documents of a private organization,
which the FOI Act does not apply to, please contact the organization
directly to find out how to access the documents you are seeking. For
example, if you are seeking to access to hospital records or your medical
centre records, please contact these organisations directly.
Enquiries and other matters
If your email relates to any of the following, please utilise our online
forms instead, which are available at
[2]https://www.oaic.gov.au/about-us/contact...
- Enquiry
- Privacy Complaint
- Notifiable Data Breach
- Consumer Data Right Complaint
- FOI Complaint
- Freedom of Information Review
- Agency FOI Extension of Time Requests
- Speech requests.
Notice:
The information contained in this email message and any attached files may
be confidential information, and may also be the subject of legal
professional privilege. If you are not the intended recipient any use,
disclosure or copying of this email is unauthorised. If you received this
email in error, please notify the sender by contacting the department's
switchboard on 1300 488 064 during business hours (8:30am - 5pm Canberra
time) and delete all copies of this transmission together with any
attachments.
References
Visible links
1. https://www.oaic.gov.au/about-us/access-...
2. https://www.oaic.gov.au/about-us/contact...
Our reference: FOIREQ24/00132
Dear CR
Freedom of Information request
I refer to your request for access to documents made under the Freedom of
Information Act 1982 (Cth) (FOI Act).
You FOI request was received by the Office of the Australian Information
Commissioner (OAIC) on 1 March 2024. This means that a decision on your
FOI request is currently due on 2 April 2024.
Scope of your request
Your FOI request was made in the following terms:
1. Data breach reports for the period 1 January 2020 to 1 March 2024 where
the respondents' sector is government (local, state, and federal
government).
o The document I require is similar to document 52 released in
FOIREQ24/00047.
+ If it is not too much trouble, please include dates in the report.
o Respondent names are to be included in the scope of this request.
In order to process your request as efficiently as possible, I will
exclude duplicates and early parts of email streams that are captured in
later email streams from the scope of this request, unless you advise me
otherwise.
I will not identify you as the FOI applicant during any consultation
process. However, documents that are within the scope of your request that
the OAIC may need to consult third parties about may contain your personal
information.
Timeframes for dealing with your request
Section 15 of the FOI Act requires the OAIC to process your request no
later than 30 days after the day we receive it. However, section 15(6) of
the FOI Act allows us a further 30 days in situations where we need to
consult with third parties about certain information, such as business
documents or documents affecting their personal privacy.
The current decision due date for your request is 2 April 2024. We will
advise you if this timeframe is otherwise extended.
Disclosure Log
Documents released under the FOI Act may be published online on our
disclosure log, unless they contain personal or business information that
would be unreasonable to publish.
If you would like to discuss your FOI request, please contact me on my
contact details set out below.
Yours sincerely
[1][IMG] Ben Wilson
Lawyer
Office of the Australian Information Commissioner
Sydney
E [2][OAIC request email]
The OAIC acknowledges Traditional Custodians of Country across
Australia and their continuing connection to land, waters and
communities. We pay our respect to First Nations people,
cultures and Elders past and present.
[3]Subscribe to Information Matters
Notice:
The information contained in this email message and any attached files may
be confidential information, and may also be the subject of legal
professional privilege. If you are not the intended recipient any use,
disclosure or copying of this email is unauthorised. If you received this
email in error, please notify the sender by contacting the department's
switchboard on 1300 488 064 during business hours (8:30am - 5pm Canberra
time) and delete all copies of this transmission together with any
attachments.
References
Visible links
1. https://www.oaic.gov.au/
2. mailto:[OAIC request email]
3. https://www.oaic.gov.au/engage-with-us/n...
Our reference: FOIREQ24/00132
Dear CR
Please find attached correspondence in relation to your below FOI request.
Regards
[1][IMG] Ben Wilson
Lawyer
Office of the Australian Information Commissioner
Sydney
E [2][OAIC request email]
The OAIC acknowledges Traditional Custodians of Country across
Australia and their continuing connection to land, waters and
communities. We pay our respect to First Nations people,
cultures and Elders past and present.
[3]Subscribe to Information Matters
-----Original Message-----
From: CR [4][FOI #11183 email]
Sent: Friday, March 1, 2024 11:46 AM
To: OAIC - FOI [5][email address]
Subject: Freedom of Information request - Government data breach reports
from 2020
**************************************************************************
CAUTION: This email originated from outside of the organisation. Do not
click links or open attachments unless you recognise the sender and know
the content is safe.
**************************************************************************
Dear Office of the Australian Information Commissioner,
I request access to the following documents under the Freedom of
Information Act 1982:
1. Data breach reports for the period 1 January 2020 to 1 March 2024 where
the respondents' sector is government (local, state, and federal
government).
o The document I require is similar to document 52 released in
FOIREQ24/00047.
+ If it is not too much trouble, please include dates in the report.
o Respondent names are to be included in the scope of this request.
Since three‑quarters (74%) of Australians feel data breaches are one of
the biggest privacy risks they face today, it goes without saying that
there is significant public interest in favour of disclosure.
Yours faithfully,
CR
-------------------------------------------------------------------
Please use this email address for all replies to this request:
[6][FOI #11183 email]
Is [7][OAIC request email] the wrong address for Freedom of Information
requests to Office of the Australian Information Commissioner? If so,
please contact us using this form:
[8]https://www.righttoknow.org.au/change_re...
This request has been made by an individual using Right to Know. This
message and any reply that you make will be published on the internet.
More information on how Right to Know works can be found at:
[9]https://www.righttoknow.org.au/help/offi...
Please note that in some cases publication of requests and responses will
be delayed.
If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.
-------------------------------------------------------------------
Notice:
The information contained in this email message and any attached files may
be confidential information, and may also be the subject of legal
professional privilege. If you are not the intended recipient any use,
disclosure or copying of this email is unauthorised. If you received this
email in error, please notify the sender by contacting the department's
switchboard on 1300 488 064 during business hours (8:30am - 5pm Canberra
time) and delete all copies of this transmission together with any
attachments.
References
Visible links
1. https://www.oaic.gov.au/
2. mailto:[OAIC request email]
3. https://www.oaic.gov.au/engage-with-us/n...
4. mailto:[FOI #11183 email]
5. mailto:[email address]
6. mailto:[FOI #11183 email]
7. mailto:[OAIC request email]
8. https://www.righttoknow.org.au/change_re...
9. https://www.righttoknow.org.au/help/offi...
Dear Office of the Australian Information Commissioner,
I am writing in regard to my FOI request 'Government data breach reports from 2020' (FOIREQ24/00132). I understand that the statutory timeframe for requesting an internal review has passed.
I have prepared a detailed request for internal review, which I believe presents compelling arguments in favour of disclosing the redacted information. However, before submitting it, I would like to inquire whether the OAIC would be willing to accept a late request for internal review or if it would be preferable to submit a new, duplicate FOI request.
I would appreciate your guidance on the best course of action.
Thank you for your time and consideration.
Yours sincerely,
CR
Your email has been received by the Office of Australian Information
Commissioner.
FOI requests to the OAIC
Please note that this email address is only used for making requests to
obtain access to a document held by the OAIC pursuant to the Freedom of
Information Act 1982 (Cth) (FOI Act). We will only action and respond to
emails making FOI requests to the OAIC. For information on how to make an
FOI request to the OAIC, and to ensure that your request complies with the
requirements of the FOI Act, please refer to the FOI page on the OAIC’s
website at:
[1]https://www.oaic.gov.au/about-us/access-...
Once your request has been assessed by the OAIC, and registered on our
system, a separate acknowledgement email will be sent to you with a
reference number.
The OAIC does not hold all documents of other Commonwealth government
agencies, other state government agencies, or private organisations.
Accordingly:
1) if you are seeking to access documents of a particular
Commonwealth agency, you will need to make your request directly to the
relevant agency. For example, if you are requesting a copy of your visa
records, please make an FOI request and send it to the Department of Home
Affairs.
2) if you are seeking to access documents of a state or local
government agency, as each Australian state and territory also have
separate FOI legislation that governs information held by state government
agencies, please contact the relevant agency as to how to make an
application to access the documents. For example, if you are seeking
access to police report from NSW Police Force, it is governed by the
Government Information (Public Access) Act 2009 (NSW) (GIPA Act), and you
will need to contact NSW police to find out how to make a GIPA application
for the police report.
3) if you are seeking to access documents of a private organization,
which the FOI Act does not apply to, please contact the organization
directly to find out how to access the documents you are seeking. For
example, if you are seeking to access to hospital records or your medical
centre records, please contact these organisations directly.
Enquiries and other matters
If your email relates to any of the following, please utilise our online
forms instead, which are available at
[2]https://www.oaic.gov.au/about-us/contact...
- Enquiry
- Privacy Complaint
- Notifiable Data Breach
- Consumer Data Right Complaint
- FOI Complaint
- Freedom of Information Review
- Agency FOI Extension of Time Requests
- Speech requests.
Notice:
The information contained in this email message and any attached files may
be confidential information, and may also be the subject of legal
professional privilege. If you are not the intended recipient any use,
disclosure or copying of this email is unauthorised. If you received this
email in error, please notify the sender by contacting the department's
switchboard on 1300 488 064 during business hours (8:30am - 5pm Canberra
time) and delete all copies of this transmission together with any
attachments.
References
Visible links
1. https://www.oaic.gov.au/about-us/access-...
2. https://www.oaic.gov.au/about-us/contact...
Dear CR
Thank you for your email below.
If you would like to seek internal review of the original decision, even
though the timeframe for requesting an interview has passed, you can make
submissions to the OAIC reasons why an internal review was not sought
during the 30 day timeframe and why additional time should be granted. The
OAIC will then consider whether to grant you that extension of time for
the internal review matter to proceed. You can find out further about
internal review in Part 9 of the FOI Guidelines.
If you would like to make a new FOI request, this would capture data up to
the date of your new FOI request.
It really is a matter of preference which option you would like to proceed
with.
Please do kindly let us know how you would like to proceed.
Kind regards
Margaret
[1][IMG] Margaret Sui (she/her)
Principal Lawyer
Office of the Australian Information Commissioner
Sydney | GPO Box 5288 Sydney NSW 2001
P +61 2 9942 4145 E [2][email address]
The OAIC acknowledges Traditional Custodians of Country
across Australia and their continuing connection to land,
waters and communities. We pay our respect to First Nations
people, cultures and Elders past and present.
[3]Subscribe to Information Matters
-----Original Message-----
From: CR <[FOI #11183 email]>
Sent: Wednesday, July 3, 2024 4:54 PM
To: OAIC - FOI <[email address]>
Subject: RE: Freedom of Information request - Government data breach
reports from 2020
**************************************************************************
CAUTION: This email originated from outside of the organisation. Do not
click links or open attachments unless you recognise the sender and know
the content is safe.
**************************************************************************
Dear Office of the Australian Information Commissioner,
I am writing in regard to my FOI request 'Government data breach reports
from 2020' (FOIREQ24/00132). I understand that the statutory timeframe for
requesting an internal review has passed.
I have prepared a detailed request for internal review, which I believe
presents compelling arguments in favour of disclosing the redacted
information. However, before submitting it, I would like to inquire
whether the OAIC would be willing to accept a late request for internal
review or if it would be preferable to submit a new, duplicate FOI
request.
I would appreciate your guidance on the best course of action.
Thank you for your time and consideration.
Yours sincerely,
CR
-----Original Message-----
Our reference: FOIREQ24/00132
Dear CR
Please find attached correspondence in relation to your below FOI request.
Regards
[1][IMG] Ben Wilson
Lawyer
Office of the Australian Information Commissioner
Sydney
E [2][OAIC request email]
The OAIC acknowledges Traditional Custodians of Country across Australia
and their continuing connection to land, waters and communities. We pay
our respect to First Nations people, cultures and Elders past and
present.
[3]Subscribe to Information Matters
-------------------------------------------------------------------
Please use this email address for all replies to this request:
[4][FOI #11183 email]
This request has been made by an individual using Right to Know. This
message and any reply that you make will be published on the internet.
More information on how Right to Know works can be found at:
[5]https://www.righttoknow.org.au/help/offi...
Please note that in some cases publication of requests and responses will
be delayed.
If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.
-------------------------------------------------------------------
Notice:
The information contained in this email message and any attached files may
be confidential information, and may also be the subject of legal
professional privilege. If you are not the intended recipient any use,
disclosure or copying of this email is unauthorised. If you received this
email in error, please notify the sender by contacting the department's
switchboard on 1300 488 064 during business hours (8:30am - 5pm Canberra
time) and delete all copies of this transmission together with any
attachments.
References
Visible links
1. https://www.oaic.gov.au/
2. mailto:[email address]
3. https://www.oaic.gov.au/engage-with-us/n...
4. mailto:[FOI #11183 email]
5. https://www.righttoknow.org.au/help/offi...
Dear Margaret Sui,
I hope this message finds you well.
Following our recent correspondence, I have decided to submit a new FOI request. I request access to the following documents under the Freedom of Information Act 1982:
1. Data breach reports from 1 January 2020 to 5 July 2024 where the respondent's sector is government (local, state, and federal government).
- The required document is similar to the one released in FOIREQ24/00132.
- Respondent names are to be included in the scope of this request.
I respectfully submit that disclosing agency names is strongly aligned with the public interest, as evidenced by the OAIC's Australian Community Attitudes to Privacy Survey 2023:
- Only two in five Australians feel most organisations they deal with are transparent about how they handle their information. Disclosing the agency names would serve the public interest by providing transparency and accountability around how government agencies are managing data breaches.
- 82% of Australians actively care about protecting their personal information. Knowing which agencies have experienced breaches empowers them to make informed decisions about their interactions with those agencies.
- Three-quarters of Australians feel data breaches are one of the biggest privacy risks they face today. Identifying the agencies involved allows for more nuanced public debate and scrutiny of this critical issue.
- After quality and price, data privacy is the third most important factor when choosing a product or service. Disclosing the agency names would further empower Australians to make well-informed decisions when accessing government services.
For these reasons, I believe the public interest factors strongly favour the disclosure of the respondent names in the requested data breach reports. I hope you will give this new FOI request your careful consideration. Please let me know if you require any further information from me.
Yours faithfully,
CR
Our reference: FOIREQ24/00352
Dear CR,
Freedom of Information request
I refer to your request for access to documents made under the Freedom of
Information Act 1982 (Cth) (FOI Act).
Your FOI request was received by the Office of the Australian Information
Commissioner (OAIC) on Friday 5 July 2024. This means that a decision on
your FOI request is currently due on Monday 5 August 2024.
Consultation on the scope of your request
Your FOI request was made in the following terms:
I request access to the following documents under the Freedom of
Information Act 1982:
1. Data breach reports from 1 January 2020 to 5 July 2024 where the
respondent's sector is government (local, state, and federal government).
- The required document is similar to the one released in FOIREQ24/00132.
- Respondent names are to be included in the scope of this request.
Upon consultation with the OAIC Data Breach Team, to appropriately action
your request we would be grateful for your confirmation on whether you are
seeking data breach reports made:
• under the Notifiable Data Breaches scheme of the Privacy Act 1988
(Cth)
• under the My Health Records Act 2012 (Cth)
• under the National Cancer Screening Register Act 2016 (Cth)
• voluntarily, or
• all of the above.
Please kindly provide your confirmation by close of business Friday 12
July 2024. If we do not hear from you by this date, we will process your
request on the basis that you are after data breach reports in line with
the ‘all of the above’ option.
Timeframes for dealing with your request
Section 15 of the FOI Act requires the OAIC to process your request no
later than 30 days after the day we receive it. However, section 15(6) of
the FOI Act allows us a further 30 days in situations where we need to
consult with third parties about certain information, such as business
documents or documents affecting their personal privacy.
The current decision due date for your request is Monday 5 August 2024. We
will advise you if this timeframe is otherwise extended.
Disclosure Log
Documents released under the FOI Act may be published online on our
disclosure log, unless they contain personal or business information that
would be unreasonable to publish.
If you would like to discuss your FOI request, please contact me on my
contact details set out below.
Yours sincerely
Tahlia
Tahlia Pelaccia (she/her)
[1][IMG] Lawyer
Office of the Australian Information Commissioner
E [2][OAIC request email]
The OAIC acknowledges Traditional Custodians of Country across Australia
and their continuing connection to land, waters and communities. We pay
our respect to First Nations people, cultures and Elders past and present.
[3]Subscribe to Information Matters
-----Original Message-----
From: CR <[FOI #11183 email]>
Sent: Friday, July 5, 2024 2:21 AM
To: OAIC - FOI <[email address]>
Subject: RE: Freedom of Information request - Government data breach
reports from 2020 [SEC=OFFICIAL]
**************************************************************************
CAUTION: This email originated from outside of the organisation. Do not
click links or open attachments unless you recognise the sender and know
the content is safe.
**************************************************************************
Dear Margaret Sui,
I hope this message finds you well.
Following our recent correspondence, I have decided to submit a new FOI
request. I request access to the following documents under the Freedom of
Information Act 1982:
1. Data breach reports from 1 January 2020 to 5 July 2024 where the
respondent's sector is government (local, state, and federal government).
- The required document is similar to the one released in FOIREQ24/00132.
- Respondent names are to be included in the scope of this request.
I respectfully submit that disclosing agency names is strongly aligned
with the public interest, as evidenced by the OAIC's Australian Community
Attitudes to Privacy Survey 2023:
- Only two in five Australians feel most organisations they deal with are
transparent about how they handle their information. Disclosing the agency
names would serve the public interest by providing transparency and
accountability around how government agencies are managing data breaches.
- 82% of Australians actively care about protecting their personal
information. Knowing which agencies have experienced breaches empowers
them to make informed decisions about their interactions with those
agencies.
- Three-quarters of Australians feel data breaches are one of the biggest
privacy risks they face today. Identifying the agencies involved allows
for more nuanced public debate and scrutiny of this critical issue.
- After quality and price, data privacy is the third most important factor
when choosing a product or service. Disclosing the agency names would
further empower Australians to make well-informed decisions when accessing
government services.
For these reasons, I believe the public interest factors strongly favour
the disclosure of the respondent names in the requested data breach
reports. I hope you will give this new FOI request your careful
consideration. Please let me know if you require any further information
from me.
Yours faithfully,
CR
-----Original Message-----
Dear CR
Thank you for your email below.
If you would like to seek internal review of the original decision, even
though the timeframe for requesting an interview has passed, you can make
submissions to the OAIC reasons why an internal review was not sought
during the 30 day timeframe and why additional time should be granted.
The OAIC will then consider whether to grant you that extension of time
for the internal review matter to proceed. You can find out further
about internal review in Part 9 of the FOI Guidelines.
If you would like to make a new FOI request, this would capture data up
to the date of your new FOI request.
It really is a matter of preference which option you would like to
proceed with.
Please do kindly let us know how you would like to proceed.
Kind regards
Margaret
[1][IMG] Margaret Sui (she/her)
Principal Lawyer
Office of the Australian Information Commissioner
Sydney | GPO Box 5288 Sydney NSW 2001
P +61 2 9942 4145 E [2][email address]
The OAIC acknowledges Traditional Custodians of Country across Australia
and their continuing connection to land, waters and communities. We pay
our respect to First Nations people, cultures and Elders past and
present.
[3]Subscribe to Information Matters
-------------------------------------------------------------------
Please use this email address for all replies to this request:
[4][FOI #11183 email]
This request has been made by an individual using Right to Know. This
message and any reply that you make will be published on the internet.
More information on how Right to Know works can be found at:
[5]https://www.righttoknow.org.au/help/offi...
Please note that in some cases publication of requests and responses will
be delayed.
If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.
-------------------------------------------------------------------
Notice:
The information contained in this email message and any attached files may
be confidential information, and may also be the subject of legal
professional privilege. If you are not the intended recipient any use,
disclosure or copying of this email is unauthorised. If you received this
email in error, please notify the sender by contacting the department's
switchboard on 1300 488 064 during business hours (8:30am - 5pm Canberra
time) and delete all copies of this transmission together with any
attachments.
References
Visible links
1. https://www.oaic.gov.au/
2. mailto:[OAIC request email]
3. https://www.oaic.gov.au/engage-with-us/n...
4. mailto:[FOI #11183 email]
5. https://www.righttoknow.org.au/help/offi...
Dear Tahlia,
I am seeking data breach reports made under the Notifiable Data Breaches scheme. The same document as released in FOIREQ24/00132.
Thank you for reaching out for clarification.
Kind regards,
CR
Our reference: FOIREQ24/00352
Dear CR
Thank you kindly for your prompt response to our request for scope clarification.
I confirm we will process your request for data breach reports made under the Notifiable Data Breach Scheme of the Privacy Act 1999 (Cth).
Timeframes for dealing with your request
Section 15 of the FOI Act requires the OAIC to process your request no later than 30 days after the day we receive it. However, section 15(6) of the FOI Act allows us a further 30 days in situations where we need to consult with third parties about certain information, such as business documents or documents affecting their personal privacy.
The current decision due date for your request is 5 August 2024. We will advise you if this timeframe is otherwise extended.
Disclosure Log
Documents released under the FOI Act may be published online on our disclosure log, unless they contain personal or business information that would be unreasonable to publish.
If you would like to discuss your FOI request, please contact me on my contact details set out below.
Yours sincerely
Tahlia
Tahlia Pelaccia (she/her)
Lawyer
Office of the Australian Information Commissioner
E [OAIC request email]
The OAIC acknowledges Traditional Custodians of Country across Australia and their continuing connection to land, waters and communities. We pay our respect to First Nations people, cultures and Elders past and present.
Subscribe to Information Matters
-----Original Message-----
From: CR <[FOI #11183 email]>
Sent: Thursday, July 11, 2024 1:07 PM
To: OAIC - FOI <[email address]>
Subject: RE: Freedom of Information request - Government data breach reports from 2020 [SEC=OFFICIAL]
**************************************************************************
CAUTION: This email originated from outside of the organisation. Do not click links or open attachments unless you recognise the sender and know the content is safe.
**************************************************************************
Dear Tahlia,
I am seeking data breach reports made under the Notifiable Data Breaches scheme. The same document as released in FOIREQ24/00132.
Thank you for reaching out for clarification.
Kind regards,
CR
-----Original Message-----
Our reference: FOIREQ24/00352
Dear CR,
Freedom of Information request
I refer to your request for access to documents made under the Freedom of Information Act 1982 (Cth) (FOI Act).
Your FOI request was received by the Office of the Australian Information Commissioner (OAIC) on Friday 5 July 2024. This means that a decision on your FOI request is currently due on Monday 5 August 2024.
Consultation on the scope of your request
Your FOI request was made in the following terms:
I request access to the following documents under the Freedom of Information Act 1982:
1. Data breach reports from 1 January 2020 to 5 July 2024 where the respondent's sector is government (local, state, and federal government).
- The required document is similar to the one released in FOIREQ24/00132.
- Respondent names are to be included in the scope of this request.
Upon consultation with the OAIC Data Breach Team, to appropriately action your request we would be grateful for your confirmation on whether you are seeking data breach reports made:
• under the Notifiable Data Breaches scheme of the Privacy Act 1988
(Cth)
• under the My Health Records Act 2012 (Cth) • under the National Cancer Screening Register Act 2016 (Cth) • voluntarily, or • all of the above.
Please kindly provide your confirmation by close of business Friday 12 July 2024. If we do not hear from you by this date, we will process your request on the basis that you are after data breach reports in line with the ‘all of the above’ option.
Timeframes for dealing with your request
Section 15 of the FOI Act requires the OAIC to process your request no later than 30 days after the day we receive it. However, section 15(6) of the FOI Act allows us a further 30 days in situations where we need to consult with third parties about certain information, such as business documents or documents affecting their personal privacy.
The current decision due date for your request is Monday 5 August 2024. We will advise you if this timeframe is otherwise extended.
Disclosure Log
Documents released under the FOI Act may be published online on our disclosure log, unless they contain personal or business information that would be unreasonable to publish.
If you would like to discuss your FOI request, please contact me on my contact details set out below.
Yours sincerely
Tahlia
Tahlia Pelaccia (she/her)
[1][IMG] Lawyer
Office of the Australian Information Commissioner E [2][OAIC request email]
The OAIC acknowledges Traditional Custodians of Country across Australia and their continuing connection to land, waters and communities. We pay our respect to First Nations people, cultures and Elders past and present.
[3]Subscribe to Information Matters
-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #11183 email]
This request has been made by an individual using Right to Know. This message and any reply that you make will be published on the internet. More information on how Right to Know works can be found at:
https://www.righttoknow.org.au/help/offi...
Please note that in some cases publication of requests and responses will be delayed.
If you find this service useful as an FOI officer, please ask your web manager to link to us from your organisation's FOI page.
-------------------------------------------------------------------
Notice:
The information contained in this email message and any attached files may be confidential information, and may also be the subject of legal professional privilege. If you are not the intended recipient any use, disclosure or copying of this email is unauthorised. If you received this email in error, please notify the sender by contacting the department's switchboard on 1300 488 064 during business hours (8:30am - 5pm Local time) and delete all copies of this transmission together with any attachments.