The Notifiable Data Breaches (NDB) scheme under Part IIIC of theĀ Privacy Act 1988 (Privacy Act) established requirements for entities in responding to data breaches.
All agencies and organisations in Australia that are covered by the Privacy Act will be required to notify individuals whose personal information is involved in a data breach that is likely to result in “serious harm”, as soon as practicable after becoming aware of a breach.
For more information please read this article from ZDNet