The Ashley Madison data breach had its enforcement postscript this month, with the dating website’s parent company agreeing to settle with privacy authorities by paying $US1.6 million.
Privacy authorities typically perform regulatory and enforcement functions on their own - or occasionally with another public body - within their domestic jurisdiction. They know the domestic law they enforce. The law will clearly lay out the authority’s role and provide a clear pathway to the intended outcomes.
When I took up the job in February last year, I was pretty familiar with the legal and policy issues around privacy, and I knew a fair bit about complaints. One area that I hadn’t had so much experience with was international engagement. But this has long been important and will be a very prominent feature of the Office’s focus in 2015.