OAIC’s Latest Report on Notifiable Data Breaches: Privacy Risk Management Update

Malicious or criminal attacks and human error continue to be the major causes of notifiable data breaches reported to the OAIC during the 6 month period to 30 June 2023 according to the OAIC Notifiable Data Breaches Report – January-June 2023. This Update provides a summary of some key findings and statistics contained in the OAIC’s Report as well as steps which organisations and businesses can take to minimise the risk and harm of privacy data breaches.

Read more

OAIC Releases Latest Report on Notifiable Data Breaches – Privacy Risk Management Update

Malicious or criminal attacks and human error continue as the major cause of notifiable data breaches reported the OAIC during the 6 month period to 31 December 2022 according to the OAIC Notifiable Data Breach Report-July-Dec 2022. This Update includes a summary of some key findings and statistics contained in the Report as well as steps which organisations can take to minimise the risk and harm of privacy data breaches.

Read more

Australian Privacy Law Reforms – How will they impact you?

Major reforms are proposed to Australian privacy and data protection laws to align the laws with global standards and enhance protection. Businesses will have to start planning for the privacy law changes which are likely to be implemented within the next 12 to 18 months. This update provides an overview of the key proposed reforms and includes some steps businesses can take to get ready for the changes.

Read more

Do companies require a cybersecurity risk management plan, under Australian law?

Recent case of ASIC v RI Advice Group Pty Ltd serves as a warning that companies which do not have adequate cybersecurity risk management plans, systems and controls in place are at risk of contravention of the Corporations Law and the Privacy Act which can result in substantial pecuniary penalties. Practical steps can be taken by companies and their directors to reduce these risks.

Read more