Notifiable Data Breaches

The Privacy Amendment (Notifiable Data Breaches) Act 2017 established the Notifiable Data Breaches (NDB) scheme in Australia. The NDB scheme applies to all agencies and organisations with existing personal information security obligations under the Australian Privacy Act 1988 (Privacy Act) from 22 February 2018.  The NDB scheme introduced an obligation to notify individuals whose personal information is involved in a data breach that is likely to result in serious harm. This notification must include recommendations about the steps individuals should take in response to the breach. The Australian Information Commissioner (Commissioner) must also be notified of eligible data breaches. 
https://www.oaic.gov.au/privacy-law/privacy-act/notifiable-data-breaches-scheme
Who must comply with the NDB scheme? The following link takes you to a list of entities covered by the NDB scheme https://www.oaic.gov.au/privacy-law/privacy-act/notifiable-data-breaches-scheme/entities-covered-by-the-ndb-scheme.
 
NDB Resources
Published by: PwC 2017
Australia introduces mandatory data breach notification regime
https://www.pwc.com.au/legal/assets/legaltalk/privacy-amendment-notifiable-data-breaches-bill-2016.pdf

Published by: PwC 2018
2018 Australian Privacy Outlook
https://www.pwc.com.au/legal/assets/legaltalk/privacy-outlook-12mar18.pdf

Published by: IIM February 2018
Privacy and Security in the Digital Age and Seven Step Data Breach Plan