Comments invited by OAIC on draft resources re notifiable data breaches

On 22 February 2018 the scheme requiring notifiable data breaches (NDB) will come into effect.

A data breach can occur when personal information held by an organisation is lost or subjected to unauthorised access or disclosure. Under the NDB scheme, organisations covered by the Privacy Act 1988 will be required to notify an individual if he/she is likely to be at risk of serious harm by a data breach, and make recommendations about the steps that should be taken by the individual in response to the data breach.

The Office of the Australian Information Commissioner (OAIC) has published a draft resources relating to NDB. The draft resources issued by the OAIC covers:

• entities covered by the NDB scheme
• notifying individuals about an eligible data breach
• identifying eligible data breaches, and
• the Australian Information Commissioner’s role in the NDB scheme.

The OAIC invites comments from any interested parties about this resource before it is finalised. Comments on this resource should be sent to [email protected] by 14 July 2017.

The draft resource can be found at https://www.oaic.gov.au/resources/engage-with-us/consultations/notifiable-data-breaches/draft-entities-covered-by-the-ndb-scheme.pdf
 

Post by Karen Kumar