Australian privacy commissioner Carly Kind has ordered card issuer American Express (Amex) to implement uniform account-level access and action logging within six months,
The Office of the Australian Information Commissioner (OAIC) investigated Amex following a complaint from a former customer who had been in a personal relationship with an employee of the card issuer. That person’s sensitive data, held on five internal Amex systems, was acce…