A privacy incident occurred in the week of 10 May 2022 due to human error resulting in April 2022 Employer Cost of Claims reports being issued to the wrong employer or broker.
As soon as icare was made aware of the incident, we took immediate action to rectify the matter. Working with the Information and Privacy Commissioner of NSW (IPC) and third-party IDCARE, we have contacted the employers and brokers that received the wrong reports and are in the process of confirming with them that they have deleted the information. We have also notified the State Insurance Regulatory Authority of this issue.
We are contacting individuals concerning the incident and the steps we have taken to ensure the security of their information.
We have also commenced a comprehensive review of our systems and processes to ensure it does not happen again. icare takes its privacy obligations seriously and understands the important role we play in safeguarding the information we hold about injured workers. We are strengthening our controls to improve our safety measures.
The current unprecedented events in managing and responding to the COVID-19 in New South Wales (NSW) has required all NSW agencies to review and consider their business continuity arrangements. These events are being managed in a number of ways, for example, staff working flexibly or in being redirected to alternative duties to provide essential services.
This may impact on the ability of agencies to meet the timeframes prescribed under the Government Information (Public Access) Act 2009 (GIPA Act) for making access application decisions and or in responding to a complaint under the Government Information (Information Commissioner) Act 2009 (GIIC Act) or in dealing with an application for information under the Privacy and Personal Information Protection Act 1998 (PPIP Act) or Health Records and Information Privacy Protection Act 2002 (HRIP Act).
The Information and Privacy Commission (IPC) has released information regarding applicants rights under information access and privacy legislation on the link below.
Understand how the NSW privacy legislation protects our customers' personal and health information and how icare meets its obligations in respect of this information.