Australia: Information Commissioner initiated investigation into Meta over alleged improper disclosure of personal information to Cambridge Analytica

On 5 April 2018, the Office of the Australian Information Commissioner (OAIC) initiated an investigation under section 40(2) of the Privacy Act 1988 (Cth) in response to reports indicating that the personal information of Australian users may have been improperly disclosed to Cambridge Analytica (UK) Ltd through the “This is Your Digital Life” application. The investigation encompassed Meta, Meta Platforms Ireland Limited, and Facebook Australia Pty Ltd, and examined the entities’ compliance with the Australian Privacy Principles (APPs). Specifically, the OAIC raised concerns that Meta may have engaged in conduct constituting interference with the privacy of Australian individuals in breach of APPs 1.2 (open and transparent management of personal information), 5 (notification of collection), 6 (use or disclosure), 10 (quality of personal information), and 11 (security of personal information).