The Law Council of Australia has submitted a proposal to the government, urging them to tackle invasive personal data collection practices and enhance transparency in cyber security strategies. In their submission to the government’s cyber security discussion paper, the council emphasizes the need for a potential Cyber Security Act to address concerns related to personal data privacy.
The council specifically calls for a review of government legislation that mandates the retention of records by both government agencies and businesses. They suggest examining the necessity and duration of data retention to ensure it is justified and proportionate.
Moreover, the Law Council highlights the importance of aligning the cyber security review with the current review of the Privacy Act. They advocate for a re-examination of the Commonwealth exemptions to Australian Privacy Principles to ensure consistency and strengthen privacy protections.
The council also emphasizes the significance of accessible Freedom of Information (FOI) processes to maintain transparency in how government agencies fulfill their obligations and implement cyber security strategies effectively. This ensures that citizens can scrutinize the actions of government agencies and hold them accountable.
In addition to addressing personal data privacy concerns, the Law Council emphasizes the need for “less invasive” methods of identity verification. They recommend exploring token-based authentication and a “digital passport” as alternatives to minimize unnecessary personal data collection while still ensuring secure verification processes.
By addressing these issues, the Law Council aims to strike a balance between safeguarding personal privacy and enhancing cyber security measures. Their proposal seeks to protect individuals’ data while promoting transparency and accountability in government practices.
