Tag archives: Australia

Australian mandatory data breach notification on the agenda again

By on September 7, 2016 Posted in Data breach, Regulatory response

Data Protection Report - Norton Rose Fulbright

The Australian Federal Parliament commenced sitting on August 30, 2016, and the long-proposed mandatory data breach notification legislation is again on the newly-elected Coalition Government’s agenda. Currently, the Australian Privacy Act 1988 (Cth) does not require an organisation or agency to notify an individual of a data breach involving their personal information, but this looks … Continue reading

Australian Mandatory Data Breach Regime Moves Closer to Reality

By on April 18, 2016 Posted in Regulatory response

As mentioned in our previous legal update, the Australian Attorney-General’s Department released and sought comments on an exposure draft of a mandatory data breach notification bill, the Privacy Amendment (Notification of Serious Data Breaches) Bill 2015 (Cth) (Exposure Bill). The time for submissions has now closed, and the Attorney-General’s Department has published a number of the non-confidential … Continue reading

Data breach notification places cyber-risk at the top of the agenda

By Nick Abrahams (AU) and Jim Lennon (AU) on December 9, 2015 Posted in Compliance and risk management, Regulatory response

The bar is to be raised yet again for privacy compliance in Australia. Cyber-risk has become a key agenda item for boards for the public sector, and the impending mandatory data breach notification regime is set to propel cyber-risk to the top of the agenda.… Continue reading

Schrems: the global impact – how the ECJ ruling is affecting countries outside the EU and US

By Jim Lennon (AU) on November 2, 2015 Posted in General

A number of jurisdictions around the world follow the lead from Europe in relation to data protection and impose similar restrictions on the export of personal data unless there is an “adequate level” of protection offered in the recipient jurisdiction. The EU Commission’s “US Safe Harbor” decision had permitted the transfer of personal data between … Continue reading

Australia: Metadata retention commences, but breach notification is delayed

By on October 21, 2015 Posted in Regulatory response

On 13 October 2015, substantial amendments to the Australian Telecommunications (Interception and Access) Act 1979 (Cth) (TIA) took effect to introduce a new metadata retention scheme into the TIA. This scheme requires telecommunications carriers and internet service providers (telcos) operating in Australia to maintain records of certain telecommunications data, known as ‘metadata’, for a period … Continue reading