Statement by NSW Privacy Commissioner about reports of a data breach involving scanned copies of NSW drivers’ licences

 

The NSW Privacy Commissioner is aware of media reports about a data breach involving scanned copies of NSW drivers’ licences.

Cyber Security NSW has investigated the breach and indicated that the data referred to in media coverage has been exposed via a commercial entity and was not provided by, nor sourced from, NSW Government agencies.

The investigations regarding the breach do not indicate that the matter falls within the Privacy Commissioner’s jurisdiction in relation to public sector agencies. 

The Privacy Commissioner, however, strongly urges any commercial entity involved in the breach to assess the breach and their obligations to report it to the Office of the Australian Information Commissioner (OAIC) and notify affected individuals so that they can take steps to protect themselves from potential harm.

The Privacy Commissioner has consulted with the Australian Information Commissioner and Privacy Commissioner, who has advised that the OAIC is making inquiries with relevant parties about the breach and obligations to report under the Mandatory Notifiable Data Breach Scheme. 

ENDS

For further information, please contact:

IPC media team on 0435 961 691 or email ccadigital@ipc.nsw.gov.au

About the Information and Privacy Commission:

The Information and Privacy Commission NSW (IPC) is an independent statutory authority that administers New South Wales’ legislation dealing with privacy and access to government information. The IPC supports the Information Commissioner and the Privacy Commissioner in fulfilling their legislative responsibilities and functions and to ensure individuals and agencies can access consistent information, guidance and coordinated training about information access and privacy matters.

About the NSW Privacy Commissioner

Samantha Gavel was appointed as NSW Privacy Commissioner on 4 September 2017. Her role is to promote public awareness and understanding of privacy rights in NSW, as well as provide information, support, advice and assistance to agencies and the general public.

For further information about the IPC visit our website at www.ipc.nsw.gov.au

Download a copy of the statement.