Much has been written of late about data breaches and the liabilities for the unauthorized acquisition of Personally Identifiable Information (PII) from institutions. But what about when the alleged “breach”--the release of information --is voluntarily and/or legally compelled? What are the risks to businesses when they sell assets that include PII? What liabilities do they face? What are the rights of customers?

Radio Shack – The pioneer of PII data collection

On 16 January 2015, Justice Beech, of the Supreme Court of Western Australia, handed down his decision in the matters of Hamersley HMS Pty Ltd v Davis [2015] WASC 14 and Hamersley Iron Pty Ltd v James [2015] WASC 10 (the Hamersley Decisions). In both matters, Hamersley sought to set aside determinations made by an adjudicator pursuant to the Construction Contracts Act 2004 (WA) (CCA) and Forge Group Construction Pty Ltd (In Liq) (Receivers and Managers Appointed) (Forge) sought leave to enforce the determinations.