Optus has been fined $1.5 million after the Australian Communications and Media Authority (ACMA) found it left customers at risk.
ACMA found “large-scale breaches of public safety rules” when Optus failed to upload the information of close to 200,000 customers between January 2021 and September 2023 to a database used by emergency services.
The Integrated Public Number Database (IPND) is used by emergency services to provide location information and emergency alerts to the police, ambulance and fire brigade.
Optus failed to upload the data via its outsourced supplier Prvidr Pty Ltd, ACMA member Samantha Yorke said.
“When emergency services are hindered there can be very serious consequences for the safety of Australians,” Ms Yorke said.
“While we are not aware of anyone being directly harmed due to the non-compliance in this case, it’s alarming that Optus placed so many customers in this position for so long.
“Optus cannot outsource its obligations, even if part of the process is being undertaken by a third party.”
Future compliance to be monitored
Over the past 18 months ACMA has taken action against five telcos for IPND breaches, with financial penalties totalling more than $2 million.
“All telcos need to have systems in place that ensure they are meeting their obligations, including having robust oversight and assurance processes for third-party suppliers,” Ms Yorke said.
The watchdog has accepted a court-enforceable undertaking from Optus that requires an independent review of its IPND compliance where it uses a third-party data provider.
An Optus spokesperson says the telco accepts that proper audits and checks were not in place to ensure IPND obligations were being met for services we supply through our partner brands.
“We apologise for this and accept that we have not met community expectations,” the spokesperson said.
“Optus accepts the ACMA’s findings and has agreed to an Enforceable Undertaking to complete an independent review of the processes used to manage compliance with our IPND obligations for these partner brands and make any further improvements if required.”