Privacy Commissioner, Karen Curtis has opened investigations into Switch Mobile and One Touch Solutions following allegations raised in the ABC's Four Corners story, Your Money and Your Life, regarding possible breaches of the Privacy Act.

"My Office has contacted Switch Mobile and One Touch Solutions and will investigate whether Switch Mobile and One Touch Solutions have breached the Privacy Act.

Switch Mobile has committed to making changes to their operations.

"Switch Mobile has said that it will help customers remedy any problems that they may experience as a result of the alleged breaches. I ask affected Switch Mobile customers to take their privacy concerns to it in the first instance.

"Customers who are not satisfied with the response from Switch Mobile can contact my Office.

"Generally, people who are concerned about how to protect their personal information when conducting business over the phone or on the internet can consider taking the following steps:

• deal with businesses that have a clear Australian connection, and be sure you can contact them if you have any concerns;
• only give out personal information that is relevant to the transaction;
• if you're not sure why some personal information is being requested, ask the business to explain why it is necessary;
• if you think your personal information has been mis-used, contact the business;
• If that doesn't produce satisfactory results, you can then complain to my Office.

More information about identity theft, how to avoid being a victim, and what to do if you think you are a victim of identity theft, is available in the Attorney-General's Department ID theft prevention kit.

Under the Privacy Act, businesses must comply with the National Privacy Principles (NPPs), in particular NPPs 2, 4 and 9, when sending personal information overseas. They should ensure that:

• they adequately inform customers what will happen with their personal information;
• they make sure that the personal information is either sent to a country with adequate privacy laws or the overseas supplier is bound by a contract that explicitly covers privacy issues; and
• they make sure personal information is secure when it is sent overseas, for example, encrypting information which is sent electronically.