I'm one of the people who was affected and one of the people who initially identified the problem. 

The Federation has put a brief outline of what has happened so far in this weeks Fellow Practitioner.

A request has been made for more information from the Privacy Commission and Nick Smiths Office.   The Board has declined to supply the name of the Privacy Officer.

The Privacy Commission agreed the Board would get nothing more than a slap with a wet bus ticket if complaints are laid with them. Remember the Board can not be held liable unless there is an act of bad faith or they don't take reasonable care. It would also have to be a civil action. 

I'll post more once we get supplied with more information.