GRC Professional Podcast

Privacy Policies, Pilots & Free Trials

Grant Thornton Head of Risk and Compliance Jo-Anne Hayes talks about the importance of having privacy policies around the onboarding and use of digital, online tools, pilots and free trials.

Considering The Fair & Reasonable Test

Would your company pass the Fair and Reasonable Test? “People have started saying ‘well, we shouldn’t just be thinking about could-we, but we should be thinking about should-we. And I think if you bundle up fair and reasonable, if you bundle up privacy as a human right, if you bundle up potential rights to claim against companies, that should-we questions could be your north star and your guiding light until we have actual legislation to live by.” – Lyn Nicholson, General Counsel, Holding Redlich. The Australian government has agreed in principle to many recommendations made in the review of the Privacy Act—one of which is the fair and reasonable test, which will require regulated entities to make an impact assessment before collecting personal data for products or services. Holding Redlich General Counsel Lyn Nicholson talks about the potential impact of the fair and reasonable test because it might not be a bad idea to use it as a guiding principle even though it is not a requirement…. yet. Resources • Government response to the Privacy Act Review Report: https://www.ag.gov.au/rights-and-protections/publications/government-response-privacy-act-review-report#:~:text=In%20its%20response%20to%20the,to%20best%20protect%20this%20information • Dymocks confirms 1.2 million customers shared on the dark web in data breach: https://www.abc.net.au/news/2023-09-15/dymocks-confirms-1-million-customers-details-leaked/102863820 • Data Breach could cost Medibank $ 35 million in 2024: https://www.itnews.com.au/news/data-breach-could-cost-medibank-35-million-in-2024-599566 • Equifax fined $13.4 million following data breach: https://www.cshub.com/attacks/news/equifax-data-breach-fine

Being Proactive On People Risk

Are there cultural challenges in your organisation? How are you measuring them? Are your solutions proactive or reactive? Have you developed a psychologically safe workplace? Ombpoint Managing Director Lindall West stresses, the importance of proactively approaching people risk in organisations. Resources Respect@ Work: https://www.respectatwork.gov.au/ Anti-Discrimination and Human Rights Legislation Amendment (Respect at Work) Bill 2022: https://www.aph.gov.au/Parliamentary_Business/Bills_Legislation/bd/bd2223a/23bd027#:~:text=The%20purpose%20of%20the%20Anti,2020)%20(the%20Report). Ombpoint: https://ombpoint.com/organisations-are-auditing-their-culture-and-conduct-are-you/

ACL Penalties & Deterrence

CCL Consultants Principal & Australian Compliance Institute Course Facilitator Bronwyn Gallacher talks about the Treasury Laws Amendment (More Competition, Better Prices) Bill and the impact that the increased maximum penalties could have on Qantas and other matters after the royal assent of the amendment. Resources Treasury Laws Amendment (More Competition, Better Prices) Bill 2022: https://www.aph.gov.au/Parliamentary_Business/Bills_Legislation/Bills_Search_Results/Result?bId=r6923 ACCC Takes court action alleging Quantas advertised flights it had already cancelled: https://www.accc.gov.au/media-release/accc-takes-court-action-alleging-qantas-advertised-flights-it-had-already-cancelled Record penalties of $438 million ordered against Phoenix Institute and CTI for acting unconscionably and misleading students: https://www.accc.gov.au/media-release/record-penalties-of-438m-ordered-against-phoenix-institute-and-cti-for-acting-unconscionably-and-misleading-students

Webinar Promotion: Upcoming Compliance Webinar

GRC Solutions Head of Content Adrian Phoon talks about an upcoming webinar and future discussion groups to be conducted in conjunction with the Australian Compliance Institute. Register for The Compliance Webinar now!: https://thegrcinstitute.org/Events/eventdetail/2188 Have your say on future topics: https://www.surveymonkey.com/r/L9BFKG5 Event Description The Discussion Group will feature a range of guest speakers. The aim is to equip members with practical advice from subject matter experts and promote discussion and knowledge-sharing between peers. To launch the discussion group, we are offering a webinar event, that will be open to members and non-members. This webinar from 12-1pm on Monday 20 November. This is an opportunity for non-members to get an understanding of the topics we cover and how they might benefit from participating in discussion groups.