Notifiable Data Breach Scheme - Webinar and Resources

We were delighted to have Annan Boag, Director - OAIC Dispute Resolution, present to clients, colleagues and peers about the actions businesses need to take in order to comply with the Notifiable Data Breaches (NDB) scheme, which came into effect on 22 February 2018.

Organisations with obligations under the Australian Privacy Act 1988 are required to comply with the NDB scheme, which requires organisations to notify individuals affected by a data breach that is likely to result in serious harm. Another part of their obligation is to notify the Australian Information Commissioner, the head of the Office of the Australian Information Commissioner (OAIC) of the data breach.

Where it is uncertain if a data breach is likely to result in serious harm, organisations have an obligation to conduct an assessment of the breach.

Materials and resources provided by the OAIC

Data breach preparation and response — A guide to managing data breaches in accordance with the Privacy Act 1988 (Cth)

This guide consolidates information provided in our Data breach notification — A guide to handling personal information security breaches released in 2014, the Guide to developing a data breach response plan released in 2016, and the resources published to assist entities in complying with the NDB scheme last year. In doing so, it provides a valuable and convenient resource for staff involved in privacy compliance and data breach response.

Receiving data breach notifications

This resource for the Australian public provides guidance on what to expect when you receive a data breach notification, including how organisations might deliver notifications and when a privacy complaint can be made to our Office.

What to do after a data breach notification

This resource provides a wide range of actions you can take to reduce the risk of experiencing harm after a data breach. For example, it includes tips on combatting the harm that may result from a breach involving financial information, and steps you can take when you believe you may be a victim of identity fraud.

A copy of the presentation slides by the OAIC are available at oaic.gov.au.