A gag order restricts what can be publicly reported about findings connected to an investigation into American Express (AMEX) Australia’s handling of customer security risks, according to multiple Australian outlets. The matters stem from a preliminary view by the Office of the Australian Information Commissioner (OAIC) or relevant privacy authority that AMEX was not adequately protecting customers from insider threats to their security. After the preliminary opinion is formed, AMEX challenges and seeks legal action, with the company’s lawyers requesting orders that limit further public disclosure. As a result, the full details of what is concluded—or the basis for any enforcement—cannot be discussed openly. The reports state that the gag order is broad in scope, preventing the public from learning the extent of the alleged security shortcomings. The outlets characterise the outcome as limiting transparency around how “bad” the security is, but they do not provide additional confirmed technical details. The situation remains tied to the privacy investigation process and related legal proceedings, with disclosure constrained by the order.