The final report of the Productivity Commission inquiry into Data Availability and Use has been released. One of the Government’s responses is to create an Office of the National Data Commissioner, whose role is designed to implement an efficient data sharing framework within government.
One month in and approximately 1,500 downloads later, a team from the University of Melbourne determined there was a risk of decryption and identification of some individuals in the dataset. This was subsequently confirmed by the Australian Bureau of Statistics and CSIRO’s Data61. The dataset was removed from public access in September 2016 and an investigation opened by the Australian Information Commissioner and Privacy Commissioner, Timothy Pilgrim.The primary purpose being to assess whether any personal information had been or was at risk of compromise, and to assess the adequacy of the Department of Health’s processes for de-identifying information for publication.
The investigation report was published last week, with the Commissioner concluding breaches of Australian Privacy Principles (APP) 1 & 11 (Governance & protection of personal information) and APP 6 (Disclosure of personal information, in relation to health providers). The Commissioner, however considered that the personal information of patients had not been disclosed by publishing the dataset. A 2-year enforceable undertaking by the Department of Health to the Australian Information Commissioner intends to remedy gaps in the process. Let’s hope a compliant dataset will be publicly available to medical researchers soon!