Catagory:Privacy, Data Protection & Information Management
1
EU Court of Justice Invalidates Privacy Shield
2
“The best of its kind anywhere in the world today”: COVIDSafe among the safest tracing apps globally, study finds
3
Credential stuffing during COVID-19: Cybersecurity firm purchased over 500,000 Zoom account credentials on the dark web and hacker forums
4
D’oh! Beer company suffers cyber attack
5
Privacy Professionals download COVIDSafe App
6
It’s Trace Time! The COVIDSafe App is open for business – Part II
7
It’s Trace Time! The COVIDSafe App is open for business – Part I
8
“This is a public health app, it’s not a surveillance app”: Review finds “nothing particularly disturbing” about the Federal Government’s coronavirus tracing app
9
Let’s Track This Through: Tracking Data at the Epicentre of Efforts to Stop COVID Outbreak as Federal Government Considers Implementing Opt-In Mobile Application
10
“Major systemic failure”: The Federal Court of Australia published full names of asylum seekers on the Commonwealth Courts Portal
On the morning of 16 July 2020, in a significant decision of the Court of Justice of the European Union (CJEU), the Privacy Shield was held to be invalid.
In some positive news about the Federal Government’s COVIDSafe app, the University of Adelaide’s cybersecurity experts have assessed the Australian contact tracing app to be one of the best and safest among 34 apps used globally to track and trace COVID-19 cases.
A team from the University’s School of Computer Science made the judgment in a study which assessed Android versions of 34 of the world’s COVID-19 contact tracing apps for security and privacy vulnerabilities.
In what could only be adding fuel to the fire that is the growing concern over Zoom’s privacy and data security risks, it has been reported that over 500,000 Zoom accounts were sold on the dark web and hacker forums earlier in April. The accounts were purchased by cybersecurity firm Cyble after it noticed free Zoom accounts were being posted on hacker forums.
Cyble was able to purchase approximately 530,000 Zoom credentials, which included a user’s email address, password, personal meeting URL, and their HostKey (a six-digit number used to host meetings on Zoom). Victims included well-known companies such as Chase, Citibank and educational institutions including the University of Colorado and the University of Florida. According to Cyble, credentials belonging to its clients in the bulk purchase were also confirmed to be correct.
On Tuesday last week, Lion Beer Australia announced it had experienced a cyber incident. During the week, Lion advised there was no evidence to date of any data breaches, but was still investigating the cyber attack. Investigations revealed Lion was subject to a ransomware attack.
A number of legal professionals, with significant experience in the field of privacy law, have signed an open letter to encourage individuals to download the Commonwealth Government’s COVIDSafe App.
Among the privacy lawyers are members of K&L Gates own Australian privacy team (and the authors of this blog post) Cameron Abbott, Rob Pulham, Warwick Andersen, Michelle Aggromito and Allison Wallace.
The open letter is signed by members in their personal capacity, and signals that people who care about privacy a lot can still think that supporting the health and economic objectives of the App is more important at this time.
As at the date of this post, more than 5 million people have downloaded the App, with more needed to reach the Commonwealth Government’s target of 40% of the Australian population.
In Part I of this blog, we briefly touched on some of the safeguards that the Commonwealth Government has indicated that they will implement to address privacy concerns. Those proposed new safeguards are intended to satisfy many of the privacy concerns. However, there are additional safeguards that have been implemented in connection with the functionality of the App, which we focus on in Part II here.
The Commonwealth Government released its COVIDSafe App for download at 6.00pm AEST on Sunday 26 April, and it surpassed 1.13 million downloads within the first 12 hours. This was far greater than expectations, with Health Minister Greg Hunt commenting that, at best, the hope was that “we might get to 1 million in five days.”
The Federal Government’s coronavirus tracing app has raised some privacy concerns amongst the Australian public. Even some of our government Ministers have ruled out downloading the app due to such concerns! However, the independent cyber security body tasked with reviewing the app has said that it has found no major concerns with it.
We previously blogged
about the plethora of Asian countries who are using telecommunications
networks, smart phone applications and messaging services to inform, track and
monitor individuals who may have contracted COVID-19. It appears that
Australia’s eyes are on similar technology opportunities, as according to an
article from the SMH,
the Federal Government will ask Australians “within weeks” to opt in
and sign up for a mobile application that uses tracking data to alert
individuals as to their risks of contracting COVID-19.
According to the article, the
relevant application will monitor the movements of participants to inform
individuals whether they have been close to someone already infected with
COVID-19. The application also has the functionality to enable someone who has
contracted the virus to notify health authorities and ensure that an alert is
sent to anyone he or she has been in contact with over the previous 24 hours.
Both of these processes are part of what is known as “contact tracing”.
The Federal Court of Australia has suffered a catastrophic
data breach in which the names of individuals seeking protection visas in
Australia have been published on the publicly available Commonwealth Courts
Portal database for years.
Ordinarily, the files of such applicants are listed by
pseudonyms which are a collection of numbers and letters.