Share on LinkedInShare on LinkedIn

ARTICLE · 23 APRIL 2017

Notifying customers of serious data breaches: No longer voluntary

Holding Redlich
Holding Redlich
Contributor
Holding Redlich

Holding Redlich

Holding Redlich is a large national commercial firm with offices in Melbourne, Canberra, Sydney,...

View firm profile
Explore more from Holding Redlich

Entities subject to the new regime have time to make any changes to their existing procedures to ensure compliance.

AustraliaPrivacy

The Privacy Amendment (Notifiable Data Breaches) Act 2017 was passed by Federal Parliament on 13 February 2017 and received Royal Assent on 22 February 2017. When the Act takes effect it will amend the Privacy Act 1988 (Cth) (Privacy Act) to require entities (both Government and private sector) covered by the Privacy Act to notify any individuals affected by a data breach that is likely to result in serious harm. The Privacy Commissioner is also required to be notified of such breaches and will be given the power to direct a relevant entity to notify individuals about a serious data breach. This legislation reflects a recommendation of the Australian Law Reform Commission (ALRC) in its report 'For Your Information: Australian Privacy Law and Practice' and community concerns regarding the harm that individuals may suffer from data breaches. This legislation also reflects a concern that relevant entities may not always disclose data breaches – though the high number of

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

See more popular content from