Notifiable Data Breaches – What do I need to do?

Prepare or update your data breach response plan to ensure you are able to respond quickly to suspected data breaches, and conduct an assessment as required under the NDB scheme.

When a data breach is suspected, undertake a reasonable and expeditious assessment to determine if the data breach is likely to result in serious harm to any individual affected.

Promptly notify individuals at likely risk of serious harm.

Notify the Australian Information Commissioner as soon as practicable through a statement about the eligible data breach.