Our FOI disclosure log

Reference number

FOIREQ21/00007. Internal review of FOIREQ20/00232

Date of access

15 Feb 2021

Published on

22 February 2021

FOI request

I am writing to request an internal review of Office of the Australian Information Commissioner's handling of my FOI request 'Commissioner Briefs'.
The breadth of exemptions, given the scope of the documents they apply to (especially redactions of what are statutory reporting statistics), is excessive and needs review.
A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.righttoknow.org.au/request/commissioner_briefs

Other information

Partial access provided.
Published 22 February 2021.

Information published in the disclosure log

Reference number

FOIREQ24/00279

Date of access

29 May 2024

Published on

30 May 2024

FOI request

As discussed in our initial enquiry we are looking for additional information from the Notifiable Data Breaches Report January to Jun 2023 and Notifiable Data Breaches Report: July to December 2023  - link as below to the online content.
www.oaic.gov.au/privacy/notifiable-data-breaches/notifiable-data-breaches-publications/notifiable-data-breaches-report-january-to-june-2023
www.oaic.gov.au/privacy/notifiable-data-breaches/notifiable-data-breaches-publications/notifiable-data-breaches-report-july-to-december-2023
We are looking for the following drill-down of information contained in this report:

• Number of accounting firms which notified of a breach for 2023 and 2022
• Sources of the data breaches for accounting firms affected as well as overall financial institutions including individual number of breaches for the 2022 and 2023 period
• Number of Australians affected by data breaches by accounting firms and financial institutions in both 2022 and 2023
• What personal information was involved in the breaches for both financial institutions and accounting firms in both 2022 and 2023
• Time taken to identify breaches for both accounting firms and financial institutions for 2022 and 2023
• Breakdown of malicious or criminal attack by source of breach for accounting firms and financial institutions in both 2023 and 2022  

Please note for the above we want both the accounting and financial institution data separately not bundled together, the same with the year data.

Amended to include ‘Legal, Accounting and Management Services’ rather than just accounting institutions.

Other information

Redactions made under s 22 and s 47E(d)

Information published in the disclosure log

Reference number

FOIREQ21/00033

Date of access

29 Mar 2021

Published on

8 April 2021

FOI request

Information relating to OAIC vexatious declaration applications for financial year (1 July 2020 to 26 February 2021), and calendar years 2020 and 2021 (to 26 February 2021).

Other information

Released in full.

Published 8 April 2021.

Information published in the disclosure log

Reference number

FOIREQ24/00247

Date of access

10 May 2024

Published on

13 May 2024

FOI request

Dear Office of the Australian Information Commissioner,

1. Are general practitioners legally obligated to share, upon request, a copy of medical records to the patient (to which they [medical records] are in regard to), including all progress notes, clinical notes, visit summaries, and all other information the general practitioner has created about, or received in regards to, the patient?
2. Would it be unlawful for the general practitioner to unreasonably deny this request, given that it is deemed that no exceptions apply (e.g., the release of information would cause harm to the patient).

Other information

1 document granted access in full. Please note that a link to the released document is contained in the published document schedule.

Information published in the disclosure log

Reference number

FOIREQ24/00210

Date of access

2 May 2024

Published on

3 May 2024

FOI request

Documents between 1 June 2022 and 2 April 2024 regarding Services Australia and NDIS use of surveillance methods including (but not limited to) telecommunications metadata, optical surveillance (such as social media) and private investigators.

Other information

Release in full

Information published in the disclosure log

Reference number

FOIREQ24/00197

Date of access

24 April 2024

Published on

3 May 2024

FOI request

To confirm or validate if HSBC BANK AUSTRALIA LIMITED (ABN 48 006 434 162) have lodged a data breach to the Office of the Australian Information Commissioner (OAIC) in the 5 years prior to today's date 25/03/2024.

Other information

Redactions made under s47E(d)

Information published in the disclosure log

Reference number

FOIREQ24/00131

Date of access

30 April 2024

Published on

2 May 2024

FOI request

I request under the FOI Act:

1. the final report on the strategic assessment (referred to on page 5 of the OAIC's 2023-24 Corporate Plan)
2. any interim report on the strategic assessment (before the final report was finalised)
3. the OAIC's formal response to any interim report on the strategic assessment.

Please redact from the above documents any personal information for which you would have been required to consult under section 27A of the FOI Act.

Other information

2 documents granted access in part.

2 documents refused access in full.

Please note pages exempt in full have been removed from the document bundle.

Information published in the disclosure log

Reference number

FOIREQ24/00118

Date of access

26 April 2024

Published on

30 April 2024

FOI request

I make a Part III (‘Access to documents’) Freedom of Information Act 1982 (Cth) application for the Teams chat records the OAIC has actual and/or constructive access to that are:

• between February and April 2022, which refer to MATES or DVA
• between June 2023 and September 2023, which refer to MATES or DVA or media reporting about either
• between December 2023 and 26 February 2024, which refer to MATES or DVA or media reporting about either.

Other information

4 documents granted access in full. 9 documents granted access in part.

Information published in the disclosure log

Reference number

FOIREQ24/00182

Date of access

18 April 2024

Published on

19 April 2024

FOI request

Copies of all internal OAIC policies on assessing Privacy Act complaints.

Other information

Release in part. ss 47E(d) and 47F.

Please note that some of these documents contain outdated references/practices and are under review.

Information published in the disclosure log

Reference number

FOIREQ24/00182

Date of access

18 April 2024

Published on

19 April 2024

FOI request

Copies of all internal OAIC policies on assessing Privacy Act complaints.

Other information

Release in part. ss 47E(d) and 47F.

Please note that some of these documents contain outdated references/practices and are under review.

Information published in the disclosure log