Skip to main content
Skip to secondary navigation
Australian Government - Office of the Australian Information Commissioner - Home

Next week — government agencies and businesses must notify you of serious data breaches

In one week, the Notifiable Data Breaches (NDB) scheme comes into force. The scheme mandates that Australian Government agencies and businesses with obligations under the Privacy Act 1988 (Privacy Act) must notify you if you are likely to be at risk of serious harm because of a data breach.

A data breach occurs when personal information is accessed or disclosed without authorisation, or lost by an organisation.

A data breach can cause harm in various ways. It may result in someone experiencing serious financial harm, or harm to their physical or mental well-being.

That is why it is important to take data breach notifications seriously. As part of a notification, organisations must include steps they recommend you take to reduce the chance of experiencing harm.

We have released two new resources to outline how the NDB scheme will impact you and what you can do to reduce your risk of harm following a data breach.

Read them here: