[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-354381-105":53,"doc-detail-354381-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","mandatory-data-breach-notification-law-10-things-you-need-to-know","Mandatory Data Breach Notification Law - 10 Things You Need to Know","","Explains the mandatory federal data breach notification law that takes effect on 22 February 2018. Covers which businesses and not-for-profits under the Privacy Act must comply, what types of incidents trigger notice, and how “serious harm” is defined beyond credit card numbers. Details investigation duties, required content for notifications (including recommendations), remedial actions that can remove the need to notify, outsourcing responsibilities, and potential legal consequences for non-compliance. Includes guidance and law-prepared expert reading options.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":41,"@type":70,"position":76},"https://docshare.wps.com/template/letters/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/mandatory-data-breach-notification-law-10-things-you-need-to-know/354381/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/mandatory-data-breach-notification-law-10-things-you-need-to-know/354381.png","ImageObject",442,249,{"name":88,"@type":89},"Quinn Holloway","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-07","2026-09-22",true,{"@type":98,"interactionType":99,"userInteractionCount":47},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"When does the mandatory data breach notification law come into force?","Question",{"text":108,"@type":109},"It comes into force on 22 February 2018, and applicable businesses must comply from that date.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"What types of data breaches trigger mandatory notification?",{"text":113,"@type":109},"Unauthorized access, unauthorized disclosure, or loss of personal information that is likely to result in serious harm must be notified to the affected person(s) and the Australian Information Commissioner.",{"name":115,"@type":106,"acceptedAnswer":116},"What does “serious harm” include?",{"text":117,"@type":109},"Serious harm can include financial, physical, psychological, emotional, and reputational harm, not just credit card numbers.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},354381,1791170933,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":40,"category_name":41,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":47,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":73,"language":135,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":136,"faqs":137,"seo_title":138,"seo_description":61,"update_tm":139,"read_time":9},2336474466712,"https://ap-avatar.wpscdn.com/davatar_a8503ba1806abce46bf441b54a3ca4cd","ARE YOU READY  \nFOR THE MANDATORY  \nDATA BREACH NOTIFICATION LAW?  \nThe federal data breach notification law comes into force on 22 February 2018. The law makes it mandatory for businesses who are bound by the Privacy Act to self-­report certain types of data breaches. Here are ten things you need to know about the new law.  \n􀀡  \n􀀢  \n􀀣  \n􀀤  \n􀀥  \n􀀦  \nMandatory data breach notification is law  \nThe data breach notification requirement is not a recommendation or a code or a guideline – it’s law. It comes into full force on 22 February 2018. Applicable businesses must comply with the law from that date.  \nThe law applies to certain businesses  \nThe data breach notification law applies to businesses (and not-­for-­profits) who are bound by the Privacy Act 1988 (Cth) . This includes businesses who have an annual turnover of $3 million or more, health service providers, credit providers, credit reporting bodies and businesses who trade in personal information.  \nCertain data breaches must be notified  \nWhere there is unauthorised access, unauthorised disclosure or loss of personal information that is likely to result in serious harm to a person, a business must notify the affected person/s and the Australian Information Commissioner. The new law makes notification mandatory.  \nSuspected data breaches must be investigated  \nIf a business suspects a data breach has occurred, it must investigate to determine if the data breach needs to be notified. The new law says that businesses can’t ignore suspected data breaches or turn a blind eye.  \n“Serious harm” is not just about credit card numbers  \nThe key trigger that makes a data breach notifiable is that it is likely to result in “serious harm” to a person. Serious harm can include financial, physical, psychological, emotional and reputational harm.  \nNotification is not just a form-­filling exercise  \nA data breach notification must provide not only the details of the data breach but also recommendations on what affected people should do to minimise the risk of serious harm. Providing recommendations may require getting specialist advice (e.g. from IT, security, fraud experts) .  \nPHONE: 1300 158 788 / +61 3 9866 8850  \nEMAIL: DATABREACHLAWS@COOPERMILLS.COM.AU  \n[www.coopermills.com.au](www.coopermills.com.au)  \n􀀧  \n􀀨  \n􀀩  \n􀀪  \nEffective remedial action removes the need for notification  \nA business does not need to notify a data breach if it takes timely remedial action that prevents the likelihood serious harm. For example, the timely remote deletion of data from a lost laptop may be remedial action that prevents the risk of serious harm.  \nBusinesses need to talk to their outsourced providers  \nOutsourcing providers (e.g. outsourced billing, support or marketing providers) are likely to hold a business’ data. Businesses and their outsourced providers need to work out the responsibilities, arrangements, procedures and liability for dealing with a data breach.  \nNon-­compliance can have legal consequences  \nNon-­compliance with the data breach notification law can have serious consequences. The potential consequences of not complying with the data breach notification law include regulatory investigation, orders to pay compensation and substantial civil penalties.  \nBusinesses need to prepare for the law now  \nIf the mandatory data breach notification law applies to your business, you should prepare for it now. Having the necessary knowledge and understanding about the new law and how it works is essential.  \nGETTING READY  \nFOR THE DATA BREACH NOTIFICATION LAW  \nThe data breach notification law comes into force on 22 February 2018. Cooper Mills Lawyers has prepared a number of expert guides to help you plan for and comply with the new law. To get a copy of these guides, contact Peter Moon, Erhan Karabardak or Victor Ng on 1300 158 788 or email [databreachlaws@coopermills.com.au](databreachlaws@coopermills.com.au).  \nGUIDE TO UNDERSTANDING THE DATA BREACH NOTIFICATION LAW  \nA short but c","cbCaiguaQYGYv9So","https://ap.wps.com/l/cbCaiguaQYGYv9So","pdf",88405,"English","# Mandatory Data Breach Notification Law\n## Ten key things to know\n## Preparing and expert guides","[{\"question\":\"When does the mandatory data breach notification law come into force?\",\"answer\":\"It comes into force on 22 February 2018, and applicable businesses must comply from that date.\"},{\"question\":\"What types of data breaches trigger mandatory notification?\",\"answer\":\"Unauthorized access, unauthorized disclosure, or loss of personal information that is likely to result in serious harm must be notified to the affected person(s) and the Australian Information Commissioner.\"},{\"question\":\"What does “serious harm” include?\",\"answer\":\"Serious harm can include financial, physical, psychological, emotional, and reputational harm, not just credit card numbers.\"}]","Mandatory Data Breach Notification Law - 10 Things You Need to Know | PDF",1790110380]