Privacy regulator, OAIC, releases first Quarterly Report into the Notifiable Data Breaches Scheme, revealing majority of notifiable data breaches are caused by employees and human error.

A recent decision in a privacy case challenges the limits of consent, suggesting consumer consent does not validate over-collection of personal information and cannot override an entity’s requirement to only collect the personal information reasonably necessary for its functions and activities

The long-awaited decision between Microsoft and the US Justice Department about cross-border access to data will be waited no more, with the US Supreme Court declaring there is no longer a case to decide following the passage of the CLOUD Act.