{"id":270518,"date":"2026-06-11T15:05:00","date_gmt":"2026-06-11T19:05:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/06\/11\/privacy-commissioner-gags-complainant-over-american-express-data-security-findings\/"},"modified":"2026-06-11T15:15:09","modified_gmt":"2026-06-11T19:15:09","slug":"privacy-commissioner-gags-complainant-over-american-express-data-security-findings","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/06\/11\/privacy-commissioner-gags-complainant-over-american-express-data-security-findings\/","title":{"rendered":"Privacy commissioner gags complainant over American Express data security findings"},"content":{"rendered":"

Privacy commissioner gags complainant over American Express data security findings<\/a><\/p>\n

https:\/\/www.abc.net.au\/news\/2026-06-12\/privacy-commissioner-amex-data-security-findings-confidential\/106786202<\/a><\/p>\n

Publish Date: 2026-06-11 15:05:00<\/a><\/p>\n

Source Domain: www.abc.net.au<\/a><\/p>\n

Australia’s privacy commissioner has threatened a complainant with legal action to prevent the full disclosure of findings of a long-running investigation into American Express’s information security that found widespread technology failures.<\/p>\n

The Office of the Australian Information Commissioner (OAIC) will today publish a summary of its final determination into an investigation that began in 2023, but has threatened the complainant with an injunction or legal action to prevent disclosure of the full report.<\/p>\n

The privacy commissioner’s long-running investigation began after a man the complainant briefly dated used his position at Amex to spy on his personal banking transactions, which later forced Amex to reveal it was unable to restrict staff access to the majority of its customer accounts.<\/p>\n

The Age published the OAIC’s confidential interim decision last year, which found Amex’s technology needed to be overhauled after systemic failures meant the majority of its customers’ data were exposed to privacy breaches from rogue employees, known as “insider threat”.<\/p>\n

The summary of the final determination, set to be published on the OAIC’s website on Friday, found the complaint to be substantiated and ordered the company to pay the complainant compensation of more than $23,000.<\/p>\n

Do you know more?<\/h2>\n