10K Qld motorists’ privacy breached in ‘processing error’

The Palaszczuk government is embroiled in a major privacy breach, with more than 10,000 motorists’ fines and private details sent to the wrong people.

The Palaszczuk government is embroiled in a major privacy breach, with 10,300 motorists’ fines and private details sent to the wrong people.

The Courier-Mail can reveal thousands of motorists who were due to receive penalty infringement notices from the State Penalties Enforcement Agency (SPER) for traffic fines, such as parking and speeding, were likely sent other people’s fines instead, although authorities can’t say definitively who has been sent what.

But people have reported being sent envelopes addressed to them containing fines and threat of licence suspension with other people’s names, addresses, licence numbers and vehicle registration details.

One said their brother, who drives a red Mitsubishi Lancer, had been shocked to receive a fine in his name for a black Porsche caught going 173km/h.

The mess – which puts ­people at risk of identity theft – has seen Under Treasurer Leon Allen order an external forensic review to try to figure out exactly what has happened and how.

It comes as the state’s Privacy Commissioner seeks information on the mass breach.

A police officer issues an infringement notice to a driver during peak-hour in the Brisbane CBD. Picture: AAP Image/Dave Hunt

A Queensland Treasury spokesman said a “processing error” occurred on May 9 when data was provided from a third party to SPER’s external printing and mailing provider, who is tasked with printing the fines and envelopes.

“The data incident resulted in an estimated 10,300 debtor notices being incorrectly addressed to other debtors,” he said. “The Under Treasurer has initiated an external forensic review. Clayton Utz has been engaged.”

Asked about the breach, Privacy Commissioner Paxton Booth said the Office of the ­Information Commissioner had not been advised of the matter by either the Queensland Treasury or SPER.

Mr Booth, who has been publicly calling for the government to legislate a mandatory notification of data breach scheme recommended by the Crime and Corruption Commission two years ago, said that because one didn’t exist, the government were not ­legally obliged to even notify affected people.

“Breaches of privacy can have a substantial negative impact upon the individuals affected, ranging from emotional distress, risks of identity theft to potentially affecting their physical safety,” he said.

“Any member of the public who suspects that there personal information has been breached should, in the first instance, contact Queensland Treasury or SPER.”