Charles Darwin University

[2023] FWCA 1013

Breach details – Transcript of (C2009/10319)

Who was involved in the suspected breach?

s.365 - Application to deal with contraventions involving dismissal (C2009/10319) [matter type]
 Mr Brett Jeffrey Reynolds (Applicant)
 Veolia Environment Services (Australia) Pty Ltd (Respondent)

When did the suspected breach occur?

4 July 2022 (approx). This is the date the transcripts were ingested to Document Search and they were made available in the document search platform shortly after.

How did you become aware of the breach?

The breach was raised by an internal staff member with the document search project team on 2 March 2023 via a ticket in Ivanti. The staff member noticed a transcript that should not be accessible via document search which led to the Digital Transformation Team removing transcripts on Document Search that were tagged with the following matter types:
s.365, s.372, s.394, s.773, s.699, s.709, s.789FC

This transcript was returned in that search and removed from the production environment of Document Search (i.e. the public facing Document Search).

What steps have been taken to address the suspected breach?

The transcript was removed from document search on 9 March 2023.

A thorough manual check of transcripts on document search has been conducted to ensure there are no more published in error.

This involved searching for transcripts on Document Search that were tagged with the following matter types: s.365, s.372, s.394, s.773, s.699, s.709, s.789FC; and viewing each one to determine if it should not be published. The Digital Transformation Team also searched for the phrases “s.365”, “s.372”, “s.394”, “s.773”, “s.699”, “s.709”, “s.789FC” to review any transcript documents relating to those matter types that were not picked up in the tag search.

Briefly explain nature of suspected breach.

All historical transcripts were taken from the Commission’s old website storage folder to be uploaded and made accessible via the document search platform. The old website storage folder contained a number of transcripts that had been previously published in error and removed from the website itself but not deleted from the storage folder.

There was no record that this had occurred.

This resulted in a small number of transcripts being inadvertently published via document search.

What sort of information was disclosed?  

The names of the parties are disclosed –
Witness name; Mr John Kapay
Also named; Mr Brett Jeffrey Reynolds, MR A TURNER, MR C TANZER, MR R GREEN, Messrs Chris Trevor, Ronnie Templeman, David Demaceshon, Ian Coulson

Transcript includes that the the applicant  ‘hadn't had any training or proper induction’

The transcript concludes with the commissioner statement ‘I have concluded that Mr Reynolds did not intend to resign from or abandon his employment with Veolia.’

Set out what details regarding the dispute were disclosed, eg was sensitive information disclosed,

also consider whether any information is of a sensitive nature (eg: allegations of improper conduct) etc.

Also set out what details regarding the matter were disclosed.

Also consider for the transcripts, whether witnesses were sworn in and their addresses are in the transcript.

e.g.
There is no sensitive information disclosed (no witness names, no sensitive allegations, no addresses or phone numbers).

Does the person whose personal information was disclosed know what happened?

No

Has the Commission staff member responsible for the suspected breach received training in privacy?

The suspected breach is not the responsibility of a single staff member – it is the result of historical procedures relating to the publishing of transcripts not being able to identify that these transcripts should not be published to document search.

All staff members involved have completed mandatory training modules on privacy. 

Please attach a copy of what was disclosed in error.