Australia: Issued ACMA's direction following the investigation into Telstra over breach of telecommunications privacy requirements

On 17 May 2024, the Australian Communications and Media Authority (ACMA) issued a direction requiring Telstra to enhance compliance with telecommunications privacy regulations. The direction provided that Telstra must reconcile customer data in its systems with data in the White Pages and directory assistance databases to identify and remove any unlisted numbers improperly published by 1 July 2024 and that the reconciliation must be repeated biannually. The direction also stated that by 1 September 2024, Telstra is required to train relevant staff and third-party contractors on regulatory obligations, develop a compliance training program, and appoint an independent auditor to review its processes. The direction also required Telstra to provide periodic reports to the ACMA every six months and retain records for at least 24 months to ensure ongoing compliance.