Skip to content

Glossary · Australian Compliance

Notifiable Data Breaches Scheme

Australian law requiring organisations covered by the Privacy Act to notify affected individuals and the OAIC about eligible data breaches.

Browse all definitions

In detail

The Notifiable Data Breaches (NDB) scheme came into effect in February 2018. An eligible data breach occurs when there is unauthorised access to or unauthorised disclosure of personal information that is likely to result in serious harm to individuals, and remediation has not prevented that harm. Affected organisations must notify the OAIC and affected individuals as soon as practicable. The OAIC publishes quarterly statistics, which consistently identify human error and malicious or criminal attack as leading causes.

Sources & further reading

Check the source, not just the summary

Apply the definition

Want to talk through how this applies to your business?

Start with the decision in front of you. We will help map the fit.

Straight answers · no pitch deck · no commitment