Our October HR Breakfast Club featured Anna Phillips and Riley Berry of BAL Lawyers tackling the topic of cybersecurity and privacy in the workplace.
Riley highlighted key statistics arising from the Australian Cyber Security Centre (ACSC) Small Business Survey published in July 2020. Most startling was the following:
The full findings of the survey can be accessed here:
He then examined common forms of cyberattacks, including:
Given the frequency with which cyberattacks occur and the amount of personal and sensitive information workplaces hold, employers have several ethical and risk-management obligations in protecting the privacy of their consumers, clients, and staff and managing their electronic data.
Anna discussed the 13 Privacy Principles set out in the Privacy Act 1988 (Cth), which guide companies on how to protect the personal data of consumers and staff. Additionally, HR personnel must notify the Office of the Australian Information Commissioner if there is unauthorised access to, unauthorised disclosure, or loss of personal information held by the organisation which is likely to result in serious harm to any of the individuals to whom the data relates.
Anna and Riley emphasised that the risks posed by cyberattacks can be mitigated by workplaces informing themselves of the common characteristics of cybercrime and providing appropriate training to employees as to the role they play in avoiding such attacks. Companies would be wise to protect their computers and networks against potential threats through the use of antivirus software processes. The ACSC’s “Essential Eight” strategies to mitigate cybersecurity incidents were also explored as ways for organisations to protect their systems against adversaries.
For more information about what you can do to keep consumer and employee data safe from cyberattacks, the ACSC has developed a guide to help small businesses protect themselves from common cybersecurity incidents. This guide can be accessed here.
Contact our Employment Law & Investigations Team for more information.