The Privacy Commissioner has found that American Express Australia Limited (Amex) interfered with an individual’s privacy by failing to take reasonable steps to protect personal information from unauthorised employee access, in breach of APP 11.1. The decision is a significant reminder that insider access is not a peripheral cyber-security issue. […]