CBA customers' medical data exposed in potential privacy breach

Medical information supplied by an unknown number of customers to Commonwealth Bank's insurance operation is made available to other arms of the bank, including to staff who decide whether to approve or decline loan applications.