Another year, another scam! While data-driven crime is more sophisticated and difficult to address than ever, human error and judgement remains one of the major problems. The latest data breach report from the Office of the Australian Information Commissioner (OAIC) is surprising for the simplicity of the problems – 37% of data breaches resulted from…
773M accounts affected by ‘Collection #1’ breach The Australian Cyber Security Centre (ACSC) is aware of a significant data breach affecting 773 million email addresses and usernames. Titled ‘Collection #1’, the data breach was made public by Australian cyber security expert Troy Hunt, who identified that a large number of credential lists had been distributed on…
Notifying a breach If a breach is assessed to potentially result in serious harm, you are obliged to advise affected individuals and the Australian Information Commissioner. You have the option to: Notify all individuals whose personal information is involved in the eligible data breach Notify only the individuals who are at likely risk of serious…
Taking all reasonable steps to assess NDB risk The Privacy Act already requires organisations to take all reasonable steps to protect personal information. The new data breach laws merely add an additional layer to assess breaches and notify where the breach poses a threat. For example, if you have not already, you should assess issues…