Australia: Office of Information Commissioner's investigation into Singtel Optus over alleged unauthorised publication of customer details

Progress

Current status
under deliberation
11 Jun 2026 under investigation
06 Aug 2021 under deliberation

Scope

Implementers
Australia
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services
Government Branch
executive
Government Body
other regulatory body
data protection authority
Implementation Level
national

Timeline of events

11 Jun 2026
under investigation

Privacy Commissioner published determination against Optus over failure to protect personal information in data breach

On 11 June 2026, the Privacy Commissioner published the determination finding Singtel Optus in breach of Australian Privacy Principle 11.1 under the Privacy Act 1988, which requires any entity holding personal information to take reasonable steps to…

Event type investigation
Action type interim ruling
Government branch executive
Government body other regulatory body
06 Aug 2021
under deliberation

Office of Information Commissioner announced investigation into Singtel Optus over alleged unauthorised publication of customer details

On 6 August 2021, the Office of the Australian Information Commissioner announced an investigation into Singtel Optus Pty Ltd under the Privacy Act 1988, following preliminary inquiries into the publication of customer details in the White Pages wit…

Event type investigation
Action type announcement
Government branch executive
Government body data protection authority