OAIC starts probe into HWL Ebsworth

The Office of the Australian Information Commissioner (OAIC) has opened an investigation into the HWL Ebsworth Lawyers (HWLE) data breach, which saw the likes of a Regional Express (Rex) subsidiary and Judo Bank lose company data.

The Australian Information Commissioner said on Wednesday it’s commenced a probe into the personal information handling practices of the firm, resulting from a data breach notified OAIC in May 2023.

The OAIC said the decision follows its preliminary inquiries into the matter, which began in June 2023.

“The Commissioner has a range of options available to her if following her investigation she is satisfied that an interference with the privacy of one or more individuals has occurred.

“This includes making a determination, which can include declarations that HWLE take specified steps to ensure that the relevant act or practice is not repeated or continued, and to redress any loss or damage suffered by reason of the act or practice,” the organisation said.

“If the investigation finds serious or repeated interferences with privacy of individuals, then the Commissioner has the power to seek civil penalties against HWLE from the Federal Court of Australia.”

In its brief statement, the OAIC also said its privacy regulatory action policy means it will “await the conclusion of the investigation before commenting further.”