David Mesman

Data inventories are effectively a ‘stock take’ of data. Of key interest in any data inventory is the personal information held by an organisation.

Forensic IT experts, cybersecurity specialists, data practitioners, network architects, risk analysts – privacy is a team sport.

Fair-and-reasonable (FAR). That’s the standard, the test for organisations handling personal information (PI) under the proposed privacy reforms. The FAR principle is also found in the ‘Objects’ section of the FOI Act at section 3(4), outlining that FOI functions “are to be be performed and exercised, as far as possible, to facilitate and promote public access to information, promptly and at the lowest reasonable cost.” And yes – fair call, I was pushing the envelope with the ‘FAR’ reference, but Commonwealth agencies may need to re-examine their approaches to what is fair-and-reasonable and what constitutes the lowest-reasonable-cost (LRC) when managing […]