Recent data breaches have attracted significant media and public attention, particularly around how organisations handle individuals’ TFN and GRI information. It is clear the public is increasingly concerned about how this type of information is handled.

In the lead up to Privacy Awareness Week, AFCA would like to remind members about the importance of handling sensitive information carefully.   

We ask members to redact or otherwise remove TFN and GRI information from documents before disclosing this information to AFCA.  TFN or GRI information should not be disclosed to AFCA where it is not reasonably necessary to deal with a complaint – which is the case for almost all complaints.    

Members should be aware that disclosing this type of information when it is not reasonably necessary may be a breach of a member’s privacy obligations.