Alec Christie

Accile AI Chronicles: Daily Industry News ACM will take no action against lawyer who hosted websites that used AI to alter legitimate news stories James Raptis, the in-house counsel for regional publisher Australian Community Media, has denied any involvement or oversight in the creation of four websites that published articles using copy from legitimate news outlets. The websites, which include League Initiative and F1 Initiative, allegedly used generative AI to disguise the copied content. Despite his implication, Australian Community Media has stated that they will not take any action against Raptis. This incident brings up questions about the potential for AI to be used for unethical purposes and the importance of overseeing all operations within a company. #AIethics #corporateoversight One of the websites mentioned in the article, AliaVera, reportedly published poorly written articles that were generated using AI. This raises concerns about the quality and accuracy of content shared on the internet, as well as the potential for misinformation to spread. It also highlights the need for stricter regulations and monitoring of online content, especially if AI is involved. #contentquality #misinformation The full article is available here: https://lnkd.in/ehaCx-t7 Accile Consulting - AI Integration Specialists Are you looking to enhance your customer experience and keep up with the latest AI advancements? Partner with Accile Consulting to tap into the full potential of AI technology and revolutionize your business. #AccileConsulting #AIIntegration #Innovation #Partnership.

1

Australians aren't getting the information they want out of privacy notices, according to the 2023 Australian Community Attitudes to Privacy survey results. And changes are coming... The Government agreed in-principle that: 👉 privacy notices should be clear, up-to-date, concise and understandable, with appropriate accessibility measures in place (proposal 10.1). To support entities to meet this requirement, standardised templates for privacy policies and privacy notices should be developed for voluntary adoption by entities (proposal 10.3). This could include standardised icons, layouts and phrases to better support consumers to make quick and informed decisions. In terms of the contents of privacy notices, the Government agreed in-principle that collection notices should also specify: 👉 If information is collected, used or disclosed for high-privacy risk activities, how to exercise individual rights, and the types of personal information that may be disclosed to overseas recipients (proposal 10.2). If you need help increasing transparency at your organisation, don’t hesitate to reach out. We’d love to work with you.

6

Are your day-to-day privacy practices enough? Take this quick quiz from the Office of the Australian Information Commissioner to evaluate whether your privacy practices are working as hard as they could be, and learn about more ways to power up your organization's privacy.    #PAW2024 #PrivacyAwarenessWeek #PowerUpYourPrivacy 

12

Every lawyer’s world is about to change. Lexis+ AI, the fastest legal generative AI on the market, goes live in Australia following successful trials, transforming legal work by delivering reliable results in seconds versus minutes, which are fully encrypted and secure. Lexis+ AI, built for both litigation and non-litigation workflows, features conversational search, intelligent legal drafting, insightful summarisation, and document upload capabilities will be a game changer for Australian legal practitioners saving up to 11 hours per week*. Learn more: https://ow.ly/uaCh50SbnxQ *Results from the LexisNexis US survey of Lexis+ AI user base 2023/24. #LexisNexisAU #AIsolutions #legalai #auslaw #lexisplusai #generativeai #legaltechinnovation

37

Data privacy basics as presented by the Dept Privacy Commissioner Liz MacPherson. AI being a reoccuring topic at the NZ Government Summit. The idea that AI needs human oversight makes good sense.

3

Attention: all Australians. The proposed new digital ID is in our legal opinion extremely concerning from a privacy perspective. Most Australians don't understand the serious consequences of the centralisation of all this highly sensitive information of all Australians. It seems to have slipped under everyone's radar and really hasn't got the coverage in the media. The risks in my view vastly outweigh any "convenience" benefits that have been touted and the legislation has been rushed through with only 2 weeks consultation provided! We need to stop, stop, stop and think about this! We are woefully unprepared for a digital ID in light of the current Privacy Act and before we implement any proposed digital ID, we desperately need our Privacy Law reformed first and arguably a Human Rights Act (in lieu of a Bill of Rights) in this Country. The EU and US are light years ahead in terms of their privacy laws. We are focusing on the wrong thing here and no digital ID would have prevented the hacks of Medibank, Optus etc. That seems to just be an excuse to push this through quickly. It isn't going to stop privacy hacks from happening, if anything it's going to do the opposite. It will provide more points of entry for hackers (only a password away from all your data) (i.e. a "honeypot"), it will also provide businesses access to the data and provide less security, not more. Centralisation of data - danger danger Will Robinson! Even more concerningly, that information will be more easily accessible by the government, Australian Tax Office and police. From a civil liberties and privacy perspective, alarm bells should be ringing. These are fundamental freedoms we should as individuals be very concerned about handing to the government under the guise of "safety" and "convenience". It appears that the service providers for the hardware and software have pushed this very hard and fast but we have not been properly consulted and even with proper safeguards in place (which there doesn't appear to be at this stage), there is still a very real danger for misuse. There have been several submissions made by a number of concerned Legal interest groups in opposition to the Bill but largely those concerns have been ignored and it's been pushed through. A digital ID, together with a Central Bank Digital Currency (CBDC) would mean that the Government, ATO, Police and even some authorised businesses will be able to track our every movement, all our expenses and spending in real time...! If that doesn't scare you as an individual, I don't know what will. We need to be very careful with how much power and these individual freedoms we give to the government. Once they are given, it's almost impossible to retrieve them. See full article here. Thanks Jerome Doraisamy at Lawyers Weekly. https://lnkd.in/gsV2bZcN

32

5 Comments

The Privacy Amendment Bill had its first reading in Parliament last week. It has broad cross-party support: Hansard link below.  The Bill’s been referred to Select Committee, where public submissions are invited. If passed, the Bill requires agencies to inform individuals when they have collected their personal information indirectly.   What’s indirect collection?  It’s when you’re collecting personal information about an individual from sources other than the individual themselves. For example: 🔔 If you’ve bought or rented lists from data service agencies or list brokers, to use for outbound marketing and fundraising. 🔔You receive personal information from another government agency, in order to provide your services.  🔔When you’re in partnership or collaboration with another organisation (for instance, a loyalty scheme) and you receive data for marketing efforts, cross-promotions, or to improve products and services. Importantly, we are not talking about suppliers / vendors here: the indirect collection rules will apply to agencies that receive personal information via a third party and use it for their own purposes. What are the proposed new requirements? If the Bill is passed, organisations collecting personal information indirectly would need to take reasonable steps to ensure that the individual is aware that the organisation holds their information, why it has been collected, who it will be shared with (amongst other matters). You won’t have to take these additional steps if the individual is already aware that you’ll receive their information (because, for example, the third party already explained this in their own privacy notice / privacy statement - this is called ‘front loading’). There’ll also be limited exemptions (e.g. where it would be appropriate to provide notice for reasons of safety, or for law enforcement purposes, or where the personal information is publicly available). What are the operational steps to be thinking about now? ✔ If you haven’t already done so, clarify your data flows. What personal information do you collect indirectly? What are your purposes for that information? What personal information do you regularly share with third parties, where those third parties use it for their own purposes?  ✔The Amendment is likely to result in more detailed descriptions in privacy notices  / privacy statements setting out which organisations will receive personal information (and why etc). But in order to do that, you’ll need to understand your data flows.  ✔The proposed changes may also prompt organisations to review their contractual arrangements with third parties those contracts are clear on who is responsible for privacy notices (and what those notices should say). Reach out to any of the #PwC New Zealand team if you’d like to chat:  Robyn Campbell Anthony Steele Ian Curry Jackie Chek Prithika Bernard Evelyn Siddondo Liukovi Nacagilevu, CA, Kristína Kinčeová https://shorturl.at/aimP7

60

1 Comment

Privacy in New Zealand Monthly wrap. What happened in May 2024? A busy month for privacy-related legislation in Parliament. 🔔 The Privacy Amendment Bill had its first reading. It has broad cross-party support, and appears very likely to pass into law.  The Bill’s been referred to Select Committee, where public submissions are invited. My summary of the Bill, and the readiness steps that organisations can take now, is here: https://rb.gy/eo252y 🔔 The Customer and Product Data Bill was introduced to Parliament this month. The purpose of the Bill is to establish a framework to enable greater access to, and sharing of, customer and product data between businesses. This is commonly referred to as a “consumer data right”. The intention is to give customers (including both individuals and entities) in designated sectors greater control over how their customer data is accessed and used, promote innovation and facilitate competition, and facilitate secure, standardised, and efficient data services. PwC’s Thought Leadership (‘How to Prepare your business for consumer data right’) is here.  https://rb.gy/s81vly 🔔 For Privacy Week in May, PwC published a series of postcards exploring three important privacy questions that different roles within an organisation should be asking. The full set of questions can be viewed here:  https://rb.gy/ei6aah 🔔PwC also launched its Privacy Capability Review, details of which can be found here: https://rb.gy/7yjeh2 Reach out to any of the #PwC New Zealand team if you’d like to talk about any of the topics discussed in this month’s wrap up: Robyn Campbell Polly Ralph Anthony Steele Ian Curry Jackie Chek Prithika Bernard Evelyn Siddondo Liukovi Nacagilevu, CA, Kristína Kinčeová #privacy #pwcnewzealand #pwclegal 

27

📢 In Defense of eSafety: Upholding Democratic Processes in the Digital Age Recently, there has been significant attention on the legal battle between Elon Musk and the Australian government over eSafety regulations. This case (see screenshot below) has sparked important conversations about the responsibilities of tech platforms in ensuring online safety and the limits of freedom of expression in the digital age. At Cybersecurity Advisors Network (CyAN), we stand in support of the Australian government’s position on eSafety, particularly in light of recent events involving X (formerly known as Twitter). The decision to issue a removal notice may be viewed by some as censorship, but it is important to consider the broader context. We also express our full support for Australian eSafety Commissioner Julie Inman - Grant, whose steadfast commitment to protecting online safety and combating harmful content deserves recognition. Her decision to issue the removal notice demonstrates leadership and dedication to upholding the safety and well-being of all individuals online. Read our full blog post here: https://lnkd.in/dWsvMGhp #trustandsafety

24

7 Comments

AUSTRALIAN PRIVACY LAW ENFORCEMENT UPDATE: The OAIC's position against Medibank is now clear from the court documents from the civil penalty proceedings in the Federal Court and there are lessons to be learnt... My view on a couple of key lessons: 1) supply chain risk is real and organisations absolutely must ensure appropriate third party risk management procedures are in place for all key risks - especially in the data and privacy space. That means appropriate obligations paired with procedures, processes and contracts to ensure compliance. At the end of the day, a watertight contractual cause of action against a party is great, but actual compliance and the avoidance of the incident is much better; and 2) get the cybersecurity basics right and they will assist with stopping many incidents or at least limiting the impact of cyber incidents. In very large organisations this can be extremely difficult, costly and laborious but it is essential. Complex systems and processes (and data retention regulations!) combined with massive data holdings create a recipe for extreme risk...and also, enable MFA....NOW! If you haven't had a chance yet, I recommend that you check out my previous article on the whole $21 trillion penalty. In short, I think that it seems extremely unlikely. My view remains the same, notwithstanding these further details. I guarantee that Medibank are not the only organisation that this applies to - many organisations all across the economy are at risk here. Be careful out there - the OAIC is watching. https://lnkd.in/guJx-3jR #privacy #privacylaw #databreach #cyberattack #penalties

40

2 Comments

AI GUIDELINES | In response to the growing use of generative AI in legal practice, the Supreme Court of Victoria has published guidelines for litigants and lawyers using AI tools to assist the litigation process. The guidelines highlight that, as with all legal technology, lawyers need to understand how AI tools function and be mindful of protecting client confidentiality and personal information. Lawyers should also be transparent about their use of AI and always exercise care and professional independence when reviewing its output. Natasha Stojanovich provides this summary. Read more: https://lnkd.in/gHE_YDsV #ai #artificialintelligence #law #lawyer #legaltech #litigation #disputes

29

This Privacy Awareness Week, we're highlighting some of the ways you can enhance the security and privacy of your AI systems 🔐 Secure and private AI systems not only safeguard sensitive data but also cultivate trust, encourage responsible practices, and fuel innovation. NAIC and Gradient Institute's 'Implementing Australia's AI Ethics Principals' report identifies 4 actions that can be taken to enhance the privacy protection of AI systems. Flip through the below to find out what they are ⬇️ After more expert insights on developing and adopting responsible AI? You’ll find practical steps here: https://bit.ly/3S6MMml #AI #AIAustralia #PrivacyAwarenessWeek #privacy

18

Are you aware of the legal obligations and ethical considerations associated with cyber incidents? As an Australian business, you may be mandated to disclose cyberattacks. But how do you navigate the Notifiable Data Breaches Scheme and avoid non-disclosure penalties? Read the full article below to learn about cyber incidents, how the NDB Scheme affects your business, and your obligations if a cyber-attack occurs. Don't let a potential data breach catch you off guard. Stay prepared and informed to protect your business and customers. https://lnkd.in/gr4DajXU #cybersecurityawareness #itsolutions #itsupport #NSWbusiness

2

📢 𝗙𝗶𝗻𝗮𝗹 𝗖𝗮𝗹𝗹 - 𝗥𝗲𝗴𝗶𝘀𝘁𝗲𝗿 𝗡𝗼𝘄 𝘁𝗼 𝗔𝘁𝘁𝗲𝗻𝗱 𝘁𝗵𝗲 𝗠𝗶𝗻𝗱𝗳𝗶𝗲𝗹𝗱𝘀 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗼𝗻 𝗖𝗼𝗺𝗺𝘂𝗻𝗶𝘁𝘆 𝗘𝘃𝗲𝗻𝘁! We are just 2 days away from the third edition of the Mindfields Automation Community (MAC) event! 𝗞𝗲𝘆 𝗧𝗮𝗸𝗲𝗮𝘄𝗮𝘆𝘀 𝗙𝗿𝗼𝗺 𝘁𝗵𝗲 𝗦𝗲𝘀𝘀𝗶𝗼𝗻: • Insights on how to mitigate challenges of GenAI • Legal framework for GenAI implementation • What has worked in the legal vertical • What has not worked in the legal vertical • Q&A Don't miss out on the insights from industry experts Michael Bacina and Mohit Sharma! Click the link below to register. Piper Alderman #Mindfields #Automation #Community #GenAI #Ethics #Legal

1

Protegrity recently launched a report navigating Australia's Data Privacy Environments in 2024 and Beyond. The cost of a data breach (not considering the reputational cost or the loss of customers and business due to a data breach) is as follows: 💲$50 Million 💲3x Value of any benefit obtained through the misuse of information or 💲30% of a company’s adjusted turnover in the relevant period However, the greatest risk of all is potentially your operational vulnerability. Start building your data security within your organizational strategy today. #dataprivacy #datasecurity #databreach https://okt.to/5LzwB0

11

In September 2023, the Office of the Australian Information Commissioner (OAIC) welcomed the Australian Government’s response to the Attorney-General’s Department’s (AGD) review of the Privacy Act 1988 as a crucial step in ensuring Australia’s privacy framework is strengthened for the future. “This is a vital set of proposals that will deliver significant gains for the Australian community,” Australian Information Commissioner and Privacy Commissioner Angelene Falk said at the time. “With increasing use of high impact technologies, it is critical that these reforms proceed as a priority alongside other key initiatives that rely on a strong privacy foundation such as the Australian Cyber Security Strategy and Digital ID framework.” The Government has agreed with 38 of the 116 proposal reforms and “agreed in-principle” to 68 proposals. Check out our latest blog article where we share more on the proposed privacy law reforms, data breaches and the big data breaches making news this week (most recently e-script provider MediSecure is at the centre of a large-scale ransomware data breach announced by the national cyber security coordinator on Thursday). https://lnkd.in/gqRxNEeH #privacylaw #privacylawreforms #databreaches #databreach #Data #privacypolicy #commerciallaw #commerciallawyer #AlburyWodonga #AlburyWodongaSurrounds

1

The OAIC's concise statement on its Federal Court proceedings against Medibank was released this week. The Court's decision will provide important guidance on the information security requirements under APP 11.1, and also the penalties (and how they are calculated) for non-compliance. Read our Insights on the concise statement here: #privacylaw #ausprivacy #jws

28