Mandatory data breach notification has commenced! Do you have a data breach response plan?

Mandatory data breach notification under the Privacy Act 1988 (Cth), applies to the Commonwealth public sector and the private sector including organisations which hold health information and provide a health service (which is broadly defined). The mandatory breach notification requirements commenced on 22 February 2018.

By now you should have developed a data breach response plan and provided relevant training to your Board, management and staff.

The Office of the Australian Information Commissioner published in February 2018 a Guide to Managing Data Breaches in accordance with the Privacy Act 1988 (Cth), a copy of which is available at: https://www.oaic.gov.au/agencies-and-organisations/guides/data-breach-preparation-and-response