James McGrath (Queensland, Liberal National Party, Assistant Minister to the Prime Minister) Share this | Hansard source

In the Australian context, the collection, use, storage, access and disclosure of personal information by government agencies and certain private sector organisations is governed by the Privacy Act. The European Union's General Data Protection Regulation includes requirements that resemble those in the Privacy Act. The government recently strengthened the protections under the Privacy Act by introducing a Notifiable Data Breaches scheme. This scheme requires notification to affected individuals and the Office of the Australian Information Commissioner where an entity that is subject to the Privacy Act experiences a data breach of personal information that poses a likely risk of serious harm to affected individuals.