AUTHOR

Image of Ashwin Pal, Partner in the Risk Advisory division at RSM Sydney. Ashwin specialises in privacy and security consulting, governance, risk, and controls advisory, IT security testing and compliance, cyber risk management, cyber security transformation, and security technology implementation for clients in energy, utilities, government, health, mining, and manufacturing sectors.
Ashwin Pal
Partner

On 13 February 2017 the Senate passed the Privacy Amendment (Notifiable Data Breaches) Bill establishing a Mandatory Data Breach Notification Scheme in Australia.  The purpose of which is to protect the rights of individuals and strengthen community trust in businesses and agencies. 

This amendment to the Australian Privacy Act 1988 (Privacy Act) gives life to the Mandatory Data Breach Notification Scheme (the Scheme) which came into effect on 22 February 2018.

The scheme has been in place for three years now and we have seen multiple breach notifications be made to the Office of the Australian Information Commissioner (OAIC) each quarter. 

Many organisations do not either understand their obligations under this scheme or simply do not know how to comply.  The rest of this paper tries to raise awareness towards this.

 

 

For more information about our Cyber Security and Resilience Services, contact our Risk Advisory Team.