Iris Vayzer

From 10 December 2026, privacy policies will be required to include additional information about how they use personal information in any automated decision-making tools or processes.

The Privacy Commissioner’s recent report on her determination on AMEX in relation to insider security risk is a timely reminder that insider threat is not just an employment, cyber or conduct issue. It is also a privacy issue and, for many …