Apologies was rushing the post: I know there is an ISX...

Apologies was rushing the post:  I know there is an ISX notification re this.

During the period up to and including 14 August 2020, there was also the breach of personal data claim VISA/ which involved/and ASX.

PERHAPS ASIC ARE ALSO NEEDING TO INVESTIGATE THIS and the ramifications of the release of the data to ASX and (another unspecified 3rd party).

https://au.finance.yahoo.com/news/isignthis-ltd-asx-isx-visa-202100430.html

ASIC - ASX Visa data - ASIC and ASX to explain to ISX and others

iSignthis Ltd (ASX:ISX) Visa Europe Ltd -Breach of Personal Data

ABN Newswire17 August 2020


Melbourne, Australia, Aug 17, 2020 - (ABN Newswire) - iSignthis Ltd (ASX:ISX) (HAM:TA8) has been advised by Visa Europe Ltd that personal data held on behalf of its European subsidiary, iSignthis eMoney Ltd, has been manually transferred to Visa Australia (AP) Pty Ltd.

No member of the iSignthis group has any contractual relationship with Visa Australia (AP) Pty Ltd. The licensing agreement for Australia was between Visa Worldwide Pte Ltd, being Visa's Asia Pacific regional head office in Singapore, and iSignthis Ltd.

The manual data transfer was not at the request of the data controller iSignthis eMoney Ltd, and was likely in breach of Visa's General Data Protection Regulation (GDPR) obligations, the Non-Disclosure Agreements and Membership Deed confidentiality agreements between Visa and iSignthis group companies. No consent was given for the data transfer by any iSignthis group company.

iSIgnthis eMoney Ltd has notified and/or lodged a complaint with;

- the United Kingdom Information Commissioner's Office reference IC-48691-X9P8

- the Office of the Australian Information Commissioner reference DBN20/00827

- the Cypriot Office of the Commissioner for Personal Data Protection reference "Visa_iSignthis"

The Company is also aware from communications originating from Visa Europe that Visa Australia has shared data with Australian Government agencies, including the Australian Securities and Investment Commission (ASIC). iSignthis is not aware of any legitimate purpose under European regulations for the sharing of the data, nor why Visa Australia would have the data in the first instance.

iSignthis is further also aware from communications originating from the ASX, that ASIC has shared some data and documents with the ASX Ltd under s127 of the ASIC Act.

Affected persons are being advised individually, and that they may lodge a complaint regarding Visa's mishandling of their personal data by visiting the below hyperlinks and including the relevant reference from above:

Australia
https://www.abnnewswire.net/lnk/DC5IW1FK

Cyprus
https://www.abnnewswire.net/lnk/X46619CM

United Kingdom