Curtis said disclosing a major data breach would be proportional to the severity of the incident but will provide a strong incentive for organisations to secure their data.
“It would also give people an opportunity to take any necessary steps to protect their personal information,” she said.
Individual privacy can also be bolstered by such a move, according to Section 15 of the Executive Summary of the submission.
Furthermore Sectin 15 stated: “While this is a relatively new development internationally, the Office [of the Privacy Commissioner] supports such a regime in principle, and looks forward to collaborating with other relevant stakeholders to develop and implement appropriate and effective breach notification provisions in the Privacy Act."
Commissioner renews calls for data breach disclosure laws
Karen Curtis, the Australian Privacy Commissioner has renewed calls for mandatory data breach laws in Australia in a 786-page submission to the Australian Law Reform Commission (ALRC).
Got a news tip for our journalists? Share it with us anonymously here.
SPONSORED RESOURCES
Secure your AI future with generative AI defense
See how F5 protects modern applications against evolving threats
Accelerate AI adoption with a cloud-first strategy
Frontier AI has changed the security landscape. Is your defence ready?
F5 sets the standard for cloud application security

HPE Networking Day Sydney
iTnews Resilience, Rewired Breakfast
RIMPA Live Convention 2026
What’s Next?
iTnews Benchmark Security Awards 2026



