memorandum about the hypothetical positions of Cyber Risk Officers with Latitude.

Whether Latitude is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles?

Whether the types of data stolen from Latitude (as described in the linked documents above) were personal information and/or sensitive information?

Whether Latitude may have engaged in an interference with privacy, as defined in the Privacy Act 1988 (Cth)?

Include external information