2 ms·
Let us all be reminded of Optus' security hubris: "Optus is not aware of any security events which would warrant revisiting the security obligations impose
by alfiedotwtf 4y ago
Let us all be reminded of Optus' security hubris:
"Optus is not aware of any security events which would warrant revisiting the security obligations imposed on regulated entities,” the telco’s submission stated."
Despite concerns that data retention could create a ‘honey pot’ for hackers, telcos already had in place security measures to protect customer data they already retained for commercial purposes, the department argued.
“Given this, it did not follow that the proposed data retention scheme presented an unmanageable level of risk to customer privacy,” its submission stated. “The evidence to date supports that the existing data security arrangement have been effective.”
https://www.computerworld.com/article/3458462/data-retention-government-gave-optus-exemption-from-encrypting-metadata.html https://www.computerworld.com/article/3458462/data-retention...
- doctor_eval 4y agoTo add more colour, the here’s the first para of the linked article: > Data retention: Government gave Optus ‘exemption’ from encrypting metadata > Editor, Computerworld | 17 JULY 2019 6:46 AEST > Optus says that it would have struggled to comply with its legislative obligations without a decision by the government that exempted it from a requirement to encrypt all metadata collect as part of Australia’s data retention regime. The government 100% has some responsibility in this. I can’t express how much this pisses me off, and I’m not even an Optus customer. The OAIC, it turns out, is a farce.
- deleted 4y ago[deleted]