Source: Privacy Commissioner
The New Zealand Office of the Privacy Commissioner (OPC) and the Office of the Australian Information Commissioner (OAIC) have commenced a joint privacy investigation into the 12 March Latitude Financial data breach. This decision follows preliminary inquiries into the matter by both offices. This is the first joint privacy investigation by Australia and New Zealand and reflects the impact of the data breach on individuals in both nations. The breach, New Zealands largest, has seen millions of New Zealanders and Australians records exposed, including drivers licenses, passports and sensitive financial data including personal income and expense information. The joint investigation will allow the use of both agencies resources. The structure of the investigation does not preclude the OAIC and OPC reaching separate regulatory outcomes or decisions regarding the most appropriate regulatory response to a breach.