This week we explore why so many organisations fall short in how they respond publicly to a cyber incident or data breach.

Even for organisations that have a well-exercised "crisis communications" muscle, too often a data breach results in a response that infuriates and erodes trust in equal measure.

We explore why standard crisis comms principles don't always apply in a data breach, and what good looks like.

Links:

Article with analysis of Qantas comms response (Mumbrella) https://mumbrella.com.au/just-trust-us-were-qantas-880124

Article with analysis of Qantas comms response (Security Brief) https://securitybrief.com.au/story/experts-give-qantas-mixed-reviews-on-cyber-breach-response

Oped from James Turner on Qantas data breach (AFR) https://www.afr.com/technology/why-the-qantas-hack-should-send-chills-around-corporate-australia-20250710-p5me2r

Article about Qantas data breach (Guardian) https://www.theguardian.com/business/2025/jul/02/qantas-confirms-cyber-attack-exposes-records-of-up-to-6-million-customers

Article about PageUp data breach (Guardian) https://www.theguardian.com/technology/2018/jun/07/thousands-of-job-seekers-details-potentially-exposed-in-hack

elevenM blog on cyber crisis communications (elevenM) https://elevenm.com.au/blog/the-four-pitfalls-of-cyber-crisis-communications/

Credits:

Editing and post-production by Martin Franklin (East Coast Studio) ⁠www.eastcoaststudio.com.au⁠

Music by Bensound.com

This week we revisit the conversation around banning under 16s from social media, and the range of technologies being considered to verify the ages of would-be social media users.
We examine the preliminary findings of a government-commissioned trial of age assurance technologies, as well as some independent media reporting on technologies in the trial.
The preliminary results have received mixed reviews, with particular concerns over the accuracy of facial recognition-based age estimation.

Links:
Preliminary findings of age assurance trial https://ageassurance.com.au/wp-content/uploads/2025/06/News-Release-Preliminary-Findings-for-publication-20250620.pdf
Article about preliminary findings of age assurance trial (ABC News) https://www.abc.net.au/news/2025-06-20/age-assurance-trial-preliminary-report/105440288
Article highlighting issues with facial age estimation technologies (ABC News) https://www.abc.net.au/news/2025-06-19/teen-social-media-ban-technology-concerns/105430458
Article about expert resigning from assurance trial advisory board (Crikey) https://www.crikey.com.au/2025/06/23/expert-resigns-teen-social-media-ban-tech-trial-advisory-board/
TWIDT #79 The long and winding road to age verification https://elevenm.com.au/podcast/episode/the-long-and-winding-road-to-age-verification/
TWIDT #122 Big ban theory – Why Australia’s social media ban for kids is raising eyebrows https://elevenm.com.au/podcast/episode/122-big-ban-theory-why-australias-social-media-ban-for-kids-is-raising-eyebrows/

Credits:
Editing and post-production by Martin Franklin (East Coast Studio) www.eastcoaststudio.com.au
Music by Bensound.com

This week we explore growing tension between the importance of safeguarding user privacy online, and the public and social value that comes from researchers having access to growing volumes of data on social media platforms.
In recent years, researchers have used platform data to shed useful light on a range of issues including mental health, social and cultural dynamics, the evolution of democracy online ... but also, importantly, how the platforms themselves are managing domains like user privacy, content algorithms and content moderation.
In some cases, the inability to access the data safely has either thwarted research or led to unsavoury data access practices. 
We look at ways researchers could be granted safe and ethical data access, including legislated transparency requirements.

Links:
Article about researchers accessing Discord user data (404) https://www.404media.co/researchers-scrape-2-billion-discord-messages-and-publish-them-online/

Article about Twitter clamping down researcher access to its API (TechCrunch) https://techcrunch.com/2023/02/14/twitters-restrictive-api-may-leave-researchers-out-in-the-cold/
Article about Meta disabling researcher access to data (The Verge) 
https://www.theverge.com/2021/8/6/22613525/facebook-nyu-research-ban-cambridge-analytica-platformer
Statement: Research Cannot Be the Justification for Compromising People’s Privacy (Meta) https://about.fb.com/news/2021/08/research-cannot-be-the-justification-for-compromising-peoples-privacy/
Article about DSA transparency requirements (Tech Policy Press) https://www.techpolicy.press/researcher-access-to-platform-data-and-the-dsa-one-step-forward-three-steps-back/
Report on achieving digital platform transparency in Australia (Reset.Tech Australia) https://au.reset.tech/news/achieving-digital-platform-public-transparency-in-australia/Mozilla research into platforms data access initiatives (Mozilla) https://www.mozillafoundation.org/en/blog/new-research-tech-platforms-data-access-initiatives-vary-widely/

Credits:
Editing and post-production by Martin Franklin (East Coast Studio) www.eastcoaststudio.com.au
Music by Bensound.com

This week we discuss the increasing prevalence of AI generated content online (aka 'AI slop'), on social media and even in books, journalism and academic journals. 

We explore how AI tools are enabling the generation of slop at scale, unleashing a flood of low quality content that is degrading our information ecosystem, making it harder to access high quality, verified information, and even getting in the way of our ability to connect with other humans online.

Links:

Max AI slop feature article (New York Magazine - paywalled) https://nymag.com/intelligencer/article/ai-generated-content-internet-online-slop-spam.html

Max Read discussing his article in New York Magazine - linked above (Read Max newsletter - not paywalled) https://maxread.substack.com/p/were-in-our-slop-era

Article on ecosystem behind AI slop content (The Conversation) https://theconversation.com/side-job-self-employed-high-paid-behind-the-ai-slop-flooding-tiktok-and-facebook-237638

Article about Meta using AI to generate comments (TechCrunch) https://techcrunch.com/2025/03/21/meta-spotted-testing-ai-generated-comments-on-instagram/

Article about Trump's use of slop (New Yorker)  https://www.newyorker.com/culture/critics-notebook/trump-is-the-emperor-of-ai-slop

Article about LinkedIn posts being AI slop (WIRED) https://www.wired.com/story/linkedin-ai-generated-influencers/

Article: AI slop is killing the internet (Guardian) https://www.theguardian.com/global/commentisfree/2025/jan/08/ai-generated-slop-slowly-killing-internet-nobody-trying-to-stop-it

404 Media coverage of AI slop (some paywalled) https://www.404media.co/tag/ai-slop/

Article on the closure of Wordfreq (404 Media) https://www.404media.co/project-analyzing-human-language-usage-shuts-down-because-generative-ai-has-polluted-the-data/

Credits:

Editing and post-production by Martin Franklin (East Coast Studio) www.eastcoaststudio.com.au

Music by Bensound.com

This week we discuss the observable global shift in mood away from AI regulation and safety towards acceleration and innovation.

It's a trend we observed several episodes ago, but appears to be gathering further speed with announcements by global political and business leaders of the urgency of re-doubling efforts to enhance AI capability. With Trump setting the tone at a federal level in the US, lawmakers have even gone as far as proposing a 10-year moratorium on ant state-based AI laws.

We explore the implications of this mood shift for Australia, as a re-elected Albanese Government and its new Industry minister plot the way forward for AI in this country.

Links:

Article about 10-year moratorium (Tech Policy Press) https://www.techpolicy.press/us-house-committee-advances-10-year-moratorium-on-state-ai-regulation/

Article about Trump rescinding Biden exec order (Cybersecurity dive) https://www.cybersecuritydive.com/news/trump-repeals-biden-ai-executive-order/738114/

Article about OpenAI CEO reversing AI regulation position (The Information) https://www.theinformation.com/briefings/apparent-reversal-openai-ceo-advocates-less-ai-regulation

Article about tech execs pushing back on regulation (Seattle Times) https://www.seattletimes.com/business/microsofts-brad-smith-other-tech-execs-give-congress-ai-wish-list/

Article about new Industry Minister Tim Ayres (InnovationAus) https://www.innovationaus.com/tim-ayres-named-industry-minister-in-new-look-cabinet/

Article about need for Australia to pursue AI sovereignty (InnovationAus) https://www.innovationaus.com/owning-the-algorithm-australias-path-to-ai-sovereignty/

Credits:

Editing and post-production by Martin Franklin (East Coast Studio) www.eastcoaststudio.com.au

Music by Bensound.com

This week we reflect on one of the most visible and annoying features of the recently concluded federal election campaign - the incessant spam from political parties.

We break down the various exemptions and carve-outs that make it legal for political parties to collect information about voters and spam us without consent.

While the premise of the exemptions is to preserve the freedom of political communication in the name of democracy, we explore how the practice might be subverting our democratic ideals.

Links:

Article explaining how political parties can legally spam voters (ABC News) https://www.abc.net.au/news/2025-04-29/political-parties-can-send-you-texts/105226350

Article breaking down Trumpet of Patriots spam campaign (SBS News) https://www.sbs.com.au/news/article/trumpet-of-patriots-texts/vsqj4l75x

Article about "H Fong" the man behind Trumpet of Patriots spam campaign (SBS News) https://www.theguardian.com/australia-news/2025/may/01/who-is-h-fong-harry-trumpet-of-patriots-sms-text-messages-federal-election-ntwnfb

Crikey for PM campaign (Crikey - Paywalled) https://www.crikey.com.au/2025/04/28/spam-texts-election-clive-palmer-trumpet-of-patriots-monique-ryan-privacy-act-crikey-for-pm/

Article about political parties' postal vote application texts (ABC News) https://www.abc.net.au/news/2025-03-31/aec-warns-of-unsolicited-postal-vote-texts/105116220

Credits:

Editing and post-production by Martin Franklin (East Coast Studio) ⁠www.eastcoaststudio.com.au⁠

Music by Bensound.com

This week we're in conversation with Rys Farthing, who is Research Director at Reset.Tech Australia, a Not-for-profit that aims to develop evidence around digital issues so that policy makers can be more informed.

We explore some of the challenges for effective digital policy making in Australia and around the world, and discuss our hopes and expectations for the Children's Online Privacy Code.

If you're a regular listener, you'll know that Reset's work comes up somewhat regularly (both episode #120 about real time bidding and #93 about data brokers were based on research reports published by Reset, for example). We believe that there's a real need for the kind of work that Reset.Tech Australia does, to build an Australian evidence base around tech policy issues and solutions, and how they play out in the Australian context.

Links:

The OAIC's announcement about phasing consultation is here: https://www.oaic.gov.au/news/blog/sunshine-and-double-rainbows-building-a-better-online-environment-for-children-and-young-people 

The law that give rise to the Children's Online Privacy Code is here: https://www.aph.gov.au/Parliamentary_Business/Bills_LEGislation/Bills_Search_Results/Result?bId=r7249

About grooming on Facebook. The leaked files that 75% of grooming came from Facebook's People You May Know (PYM) feature were reproduced in a US court, on page 12 here: https://socialmediavictims.org/wp-content/uploads/2022/06/Spence-Complaint-6_6_22.pdf Also Zoe Daniels asked if PYMK was still turned on for Australian kids in Sept 2024, and the answer was yes: https://www.theaustralian.com.au/business/media/metas-disregard-for-the-public-interest-is-galling-says-independent-mp-zoe-daniel/news-story/7783e5551f8669f665c7599d4e1dc47c

The document that notes that industry was aware of the issues of setting the bar of protection at 16 not 18. In response to a number of orgs raising this in their consultation process they responded: "in response to feedback the Code provisions concerning privacy settings on children's accounts have been amended to apply to children under 16." https://onlinesafety.org.au/wp-content/uploads/2022/11/221118_Submissions-log-responses_FINAL.pdf

Finally, we also mention the Centre for automated decision making & society's Australian ad observatory project - a fantastic participatory research project providing much needed visibility into how ads are targeted to people in Australia: https://www.admscentre.org.au/australian-ad-observatory-investigating-mobile-and-dynamic-advertising-via-computational-and-participatory-approaches/

Credits:

Editing and post-production by Martin Franklin (East Coast Studio) www.eastcoaststudio.com.au

Music by Bensound.com

This week we discuss how recent turbulence in geopolitics is translating into impacts on the digital environment.

We explore how the Trump tariffs and general shift towards increased trade protectionism might impact a swathe of tech policy initiatives around the world.

We also look at the increasingly cavalier attitudes to security, privacy, and risk management from the US Government, primarily through the actions of the Department of Government Efficiency, and the extent to which such attitudes might affect Australia as we head to an election.

Links:

Article about potential impacts to News Media Bargaining Code from US tariff policies (ABC News) https://www.abc.net.au/news/2025-04-02/media-bargaining-code-tariffs-trump/105124278

US Government list of Foreign Trade Barriers https://ustr.gov/sites/default/files/files/Press/Reports/2025NTE.pdf

Article about DOGE increasing cyber security risks (TIME) https://time.com/7268032/doge-cybersecurity-elon-musk/

Article about DOGE cyber security cutes (TechCrunch) https://techcrunch.com/2025/03/11/doge-axes-cisa-red-team-staffers-amid-ongoing-federal-cuts/

Article about war plans shared on Signal (The Atlantic - Paywalled) https://www.theatlantic.com/politics/archive/2025/03/signal-group-chat-attack-plans-hegseth-goldberg/682176/

Credits:

Editing and post-production by Martin Franklin (East Coast Studio) www.eastcoaststudio.com.au

Music by Bensound.com

This week we discuss increased the scrutiny on how charities and not-for-profits manage the data they collect.
Several breaches in recent years have led the Australian privacy regulator to issue specific guidance on privacy obligations to the NFP sector, particularly warning them against the practice of retaining donor data longer than necessary.
We explore the challenges charities face in getting privacy and cyber security right, including limited knowledge and resourcing, and pressures to make use of data to fundraise more effectively.

Links:

Privacy regulator's guidance for charities and NFPs https://www.oaic.gov.au/news/media-centre/draft-media-release-updated-nfpcharities-guidance
Podcast conversation with Privacy Commissioner about charities https://www.acnc.gov.au/media/news/defending-charity-data-privacy-commissioner-shares-insights-latest-charity-chat-podcast
Report on financial and workforce challenges faced by charities (ACNC) https://www.acnc.gov.au/media/news/cost-living-issues-impact-australian-charity-sector-latest-acnc-data
Cyber threat report on Australian charities (CyberCX) https://cybercx.com.au/news/cyber-risks-to-australian-charities-sector/
Charity telemarketer data breach (ABC News) https://www.abc.net.au/news/2023-10-21/qld-pareto-phone-charity-hack-cyber-criminal/103002650
Article about Sydney Children’s Hospitals Foundation use of data-driven marketing (The Australian) https://www.theaustralian.com.au/business/growth-agenda/childrens-charity-borrows-from-retail-sector-for-story-of-growth/news-story/4bfead86c5cab9607e342836bef66e00

Credits:
Editing and post-production by Martin Franklin (East Coast Studio) www.eastcoaststudio.com.au
Music by Bensound.com

This week Jordan is joined by fellow Victorian elevenM-er and OVIC alumnus Piotr Debowski to explore some of the challenges, trends and quirks of privacy complaints in Victoria and to introduce a new, free, elevenM resource: The Victorian Privacy Case Notes Database.

Piotr led the development of the database, which provides case notes and commentary on Victorian Civil and Administrative Tribunal and Victorian Supreme Court decisions involving the interpretation and application of the Information Privacy Principles (IPPs) from the Privacy and Data Protection Act 2014 (Vic).

We hope the database will be a useful resource for Victorian privacy officers or anyone with an interest in Victorian privacy case law. Feedback very welcome via https://elevenm.com.au/contact/.

Links:

elevenM's Victorian Privacy Case Notes Database - https://viccasenotes.elevenm.com.au/

Our case note on Gao v Victoria Legal Aid [2012] VCAT 5223 - https://viccasenotes.elevenm.com.au/case-note/gao-v-victoria-legal-aid-2012-vcat-5223/

OAIC determination in 'WP' and Secretary to the Department of Home Affairs (with guidance on quantum of compensation) - https://www.oaic.gov.au/__data/assets/pdf_file/0017/3077/wp-and-secretary-to-the-department-of-home-affairs-privacy-2021-aicmr-2-11-january-2021.pdf

Credits:

Editing and post-production by Martin Franklin (East Coast Studio) eastcoaststudio.com.au

Music by bensound.com