Commissioner renews calls for data breach disclosure laws

Curtis said disclosing a major data breach would be proportional to the severity of the incident but will provide a strong incentive for organisations to secure their data.

“It would also give people an opportunity to take any necessary steps to protect their personal information,” she said.

Individual privacy can also be bolstered by such a move, according to Section 15 of the Executive Summary of the submission.

Furthermore Sectin 15 stated: “While this is a relatively new development internationally, the Office [of the Privacy Commissioner] supports such a regime in principle, and looks forward to collaborating with other relevant stakeholders to develop and implement appropriate and effective breach notification provisions in the Privacy Act."

data leakage data security disclosure laws karen curtis privacy commissioner sarbanex oxley security