Australian Mandatory Data Breach Notification Scheme off to a Flying Start

With 63 reported data breaches in the first six weeks, the OAIC has its work cut out. Australia’s Mandatory Data Breach Notification(MDBN) scheme came into force on 22^nd February 2018, and in the first six weeks there have been 63 cases reported to the Office of the Australian Information Commissioner (OAIC).

Data Breach Notifications: Will there be a “butterfly effect” increase in phishing and cyber crime?

Much has been written about the processes, technologies and overheads of handling data breach notifications from the point of view of the organisations that may suffer breaches. Less has been mentioned on effects of these notifications on data subjects or on other, seemingly unaffected organisations.

APRA CPS 234: An Overview of the Cyber Security Standard and How to Apply it

The Australian Prudential Regulation Authority (APRA) regulates Australia’s financial services industry and, as such, has responsibility for compliance and governance over all aspects of the finance industry. This is a wide and complex remit, since financial services cover a wide range of specific business types, so when they announced their draft standard for cyber security last week, APRA CPS 234, it immediately begs the question, how can it be applied?  

Data breach notifications in GDPR are not the biggest challenges in privacy

Across the EU, and internationally, security teams are wrestling with the incoming (or pre-existing) legislation on privacy, security, data protection and mandatory data breach notification or reporting.

6 ways Data Breach Notifications will improve IT Security Operations

As the GDPR deadline looms there are still programmes and projects underway in many organisations to achieve compliance – both private and public sector.  It is easy to characterise GDPR and its requirements (including for data breach notifications) as a boon for consumers and a challenge for businesses or a marketing opportunity for consultants and lawyers and a life sentence for security teams.

Australian Mandatory Data Breach Notification – How the new law affects your business

February 22^nd is fast approaching, this is the day that mandatory data breach notification (MDBN) finally becomes law in Australia.

3 ways to avoid panic-buying security analytics solutions to meet GDPR data breach notification requirements

As 2018 dawns, the time to achieve compliance with GDPR tightens. Issues like the right to be forgotten and the need to set up processes to handle data breach notifications become pressing issues. For some organisations the process of issuing a data breach notification itself will be completely new.

Data Breach Notifications: Are businesses and consumers ready for the impact

As the title suggests, there are two communities who will very soon be forced to come to terms with data breach notifications as these are required by the EU GDPR that comes into force in May 2018.

Cyber security quotes: 4 “We need more cyber security budget” quotes that probably won’t work

We hear various cyber security quotes in conversations about threats and risks and the need to protect information. There are a few things that are perennially the case in the field of cyber security – they all hinge around really rapid growth:

GDPR Data breach notification services: 9 questions to ask service providers

When organisations investigate their obligations under GDPR one of the most significant challenges is the mandatory nature of the breach notification process. Organisations have 72 hours to inform regulators and notify data subjects as soon as possible thereafter. This blog look at some key considerations when researching GDPR Data breach notification service providers.