plain.txt

ctrl:cyber

Making sense of the stories shaping cybersecurity, privacy, AI, and everything in between. plain.txt unpacks what matters as we navigate an increasingly complex digital landscape – for individuals, organisations, and society alike – cutting through noise to focus on what’s actually happening, and what it means in practice. Hosted by Arjun Ramachandran and Jordan Wilson-Otto, bringing a practitioner-led perspective from their work at ctrl:cyber, an Australian cybersecurity firm helping organisations manage cyber risk across the full security lifecycle.

  1. #151 Trust is built here - Privacy Awareness Week with Privacy Commissioner Carly Kind

    1 DAY AGO

    #151 Trust is built here - Privacy Awareness Week with Privacy Commissioner Carly Kind

    To celebrate Privacy Awareness Week, Jordan sits down with Privacy Commissioner Carly Kind to reflect on the PAW theme, her time in the office so far, and what the future holds. The Office of the Australian Information Commissioner’s (OAIC) chosen theme for Privacy Awareness Week is Trust is built here. In every privacy complaint. In every resolution. In a wide-ranging interview, Jordan talks with the Commissioner about why she chose to focus on dispute resolution for this year’s PAW theme, and how the OAIC’s own approach to complaint handling is evolving. With Commissioner Kind approaching the half-way mark of her five-year term, they also reflect on her time in the office so far, and what she still hopes to achieve. They go deep on facial recognition and discuss what practitioners should learn from the Administrative Review Tribunal’s decision in Bunnings Group Limited and Privacy Commissioner. Finally, they talk law reform — the Children’s Online Privacy Code, what to expect from tranche 2 of the Privacy Act reforms (and maybe even when), and the upcoming amendments to the Anti-Money Laundering / Counter-Terrorism Financing (AML/CTF) Act which will introduce new privacy obligations for real estate professionals, dealers in precious metals and stones, and certain professional service providers from 1 July 2026. Links PAW 2026 at the OAIC https://www.oaic.gov.au/engage-with-us/events/privacy-awareness-week/paw-2026 The OAIC’s new approach to complaints https://www.oaic.gov.au/news/blog/handling-privacy-complaints-a-new-approach-for-a-new-era Privacy Commissioner’s determination on the 2Apply rental technology platform and statement on RentTech platforms generally https://www.oaic.gov.au/news/media-centre/renttech-platforms-must-stop-unfair-and-excessive-personal-information-collection,-says-privacy-commissioner Decision of the Administrative Review Tribunal on facial recognition at Bunnings https://www.austlii.edu.au/cgi-bin/viewdoc/au/cases/cth/ARTA/2026/130.html Privacy Commissioner statement on the Administrative Review Tribunal’s Bunnings decision https://www.oaic.gov.au/news/media-centre/privacy-commissioner-statement-on-administrative-review-tribunals-bunnings-decision OAIC on the Children’s online privacy code https://www.oaic.gov.au/privacy/privacy-registers/privacy-codes/childrens-online-privacy-code Children’s Online Privacy Code consultation materials for kids https://www.oaic.gov.au/privacy/privacy-for-kids OAIC Guidance on the AML/CTF reforms https://www.oaic.gov.au/news/media-centre/know-your-privacy-obligations-under-the-anti-money-laundering-counter-terrorism-financing-amlctf-act-updated-oaic-guidance

    30 min
  2. #150 Have your say - The Children's Online Privacy Code with Dr Kate Bower

    21 APR

    #150 Have your say - The Children's Online Privacy Code with Dr Kate Bower

    This week Jordan is joined by Dr Kate Bower from the Office of the Australian Information Commissioner (OAIC) to discuss the biggest shake-up to online privacy for Australian kids in 25 years, and how you can have your say.The Children’s Online Privacy Code will set out new rules for the handling of children’s personal information by apps games and websites likely to be accessed by children or primarily concerned with the activities of children. Kate and Jordan break down what’s in the code, where it comes from, and why it looks the way it does. They also revisit what the OAIC learnt from past consultation rounds, and how you (and your kids and your community) can have your say. Public consultation on the proposed Children’s Online Privacy Code is open until 5 June. Kate and the team are genuinely keen to hear from industry, but also from parents, carers and children. The OAIC has put together a range of engagement resources like child friendly explainers, worksheets, lesson plans and more to make it easier for kids and parents to participate, which you can access at Privacy for Kids | OAIC. Dr Kate Bower is the Director of the Privacy Reform Implementation and Social Media (PRISM) Taskforce at the Office of the Australian Information Commissioner (OAIC). Links: The OAIC’s Children’s Online Privacy Code information hub https://www.oaic.gov.au/privacy/privacy-for-kids Kate’s blog post on the code and the OAIC’s approach https://www.oaic.gov.au/news/blog/sunshine-and-double-rainbows-building-a-better-online-environment-for-children-and-young-people Credits: Editing and post-production by Martin Franklin (East CoastStudio) www.eastcoaststudio.com.au

    40 min
  3. #148 OAIC v Bunnings - Green light for a facial recognition free for all?

    19 FEB

    #148 OAIC v Bunnings - Green light for a facial recognition free for all?

    In this episode we explore the implications of an Administrative Review Tribunal ruling that Australian retailer Bunnings was reasonably entitled to use facial recognition technology (FRT) to combat crime and staff abuse in its stores. The ruling comes after a protracted dispute, with Bunnings appealing a 2024 determination by Privacy Commissioner Carly Kind that it had breached privacy laws in using FRT to scan customers' faces without their consent. We break down the legal intricacies and justifications for the decision, and explore the impact it might have on FRT adoption more widely.Links:Article about the Administrative Review Tribunal ruling (ABC) https://www.abc.net.au/news/2026-02-05/bunnings-wins-ai-facial-recognition-tech-fight/106309308ART ruling https://www.austlii.edu.au/cgi-bin/viewdoc/au/cases/cth/ARTA/2026/130.htmlOAIC statement https://www.oaic.gov.au/news/media-centre/oaic-statement-on-administrative-review-tribunals-bunning…Bunnings statement https://media.bunnings.com.au/api/public/content/51f48a5bef0748109f7b52607bdfbd06?v=9b52aa2c&_gl=1*…Analysis of ruling (The Conversation) https://theconversation.com/bunnings-decision-may-open-door-to-facial-recognition-surveillance-free…Analysis of ruling (The Guardian) https://www.theguardian.com/australia-news/2026/feb/05/bunnings-given-green-light-to-use-facial-rec… Credits:Editing and post-production by Martin Franklin (East Coast Studio) www.eastcoaststudio.com.auMusic by Bensound.com

    31 min
  4. #145 Intimacy on display - why your chatbot conversations aren't so private

    01/12/2025

    #145 Intimacy on display - why your chatbot conversations aren't so private

    AI chatbots are becoming increasingly intimate spaces, with people using them for companionship, therapy and as a helpful personal assistant.While our interactions with chatbots like ChatGPT and Copilot get more personal, we're also seeing logs and transcripts of these interactions increasingly find their way to the public - via FOI requests, court orders and security and privacy breaches.We explore the convergence of these opposing trends.   Links:Article about national security chief using Copilot (Crikey - PAYWALL) https://www.crikey.com.au/2025/11/12/australia-national-security-chief-ai-speech-writing/Article about UK tech minister using ChatGPT for policy advice (New Scientist) https://www.newscientist.com/article/2472068-revealed-how-the-uk-tech-secretary-uses-chatgpt-for-po…Article about California court order ChatGPT logs discoverable (AI Buzz) https://www.ai-buzz.com/court-rules-chatgpt-history-is-discoverable-evidence-in-lawsuitsArticle about Grok chats exposed in Google search results (BBC) https://www.bbc.com/news/articles/cdrkmk00jy0oArticle about Meta leaking chatbot prompts (Toms Guide) https://www.tomsguide.com/computing/online-security/meta-ai-was-leaking-chatbot-prompts-and-answers…OpenAI v New York Times https://openai.com/index/fighting-nyt-user-privacy-invasion/NSW Government advisory on AI and recordkeeping https://www.nsw.gov.au/nsw-government/recordkeeping/create-and-capture/ai-and-recordkeeping   Credits:Editing and post-production by Martin Franklin (East Coast Studio) www.eastcoaststudio.com.auMusic by Bensound.com

    26 min
4.6
out of 5
9 Ratings

About

Making sense of the stories shaping cybersecurity, privacy, AI, and everything in between. plain.txt unpacks what matters as we navigate an increasingly complex digital landscape – for individuals, organisations, and society alike – cutting through noise to focus on what’s actually happening, and what it means in practice. Hosted by Arjun Ramachandran and Jordan Wilson-Otto, bringing a practitioner-led perspective from their work at ctrl:cyber, an Australian cybersecurity firm helping organisations manage cyber risk across the full security lifecycle.