Misuse of Department of Health information by third party employees during pandemic response

On 25 July 2023, the Information Commissioner published this investigation report into how the Department of Health managed the access of third-party call centre staff to personal information as the Department responded to the COVID-19 pandemic. OVIC’s investigation considered whether the Department took reasonable steps to protect personal information it holds from misuse, as required by the Privacy and Data Protection Act 2014 (Vic) and Information Privacy Principle (IPP) 4.1.

Read our media release on the publication of the report.