Key issues affecting Australian workplaces in 2018

Key changes to consider in 2018

Mandatory data breach reporting obligations

From 22 February 2018, businesses subject to the new mandatory data breach notification regime will face penalties of up to $1.8 million if they fail to report data breaches in circumstances where serious harm could occur to an individual whose data has been compromised. These reforms are particularly timely in the wake of recent data breaches affecting Uber and the Australian Red Cross. They highlight the need for all businesses to establish clear data security policies to manage the risk of, and response to, external attacks and internal data breaches arising from the negligent or malicious acts of staff. Click here to read our previous update on the scope of the mandatory data breach