Notifiable Data Breach guideline – assessing a suspected data breach
Businesses need to take steps now to ensure they have adequate practices, policies and procedures in place to assess data breaches in order to meet upcoming Notifiable Data Breach requirements.
Business managers need to assess a suspected data breach as a precursor to determining if there is a Notifiable Data Breach (NDB) from February 2018.
In September 2017 the Office of the Australian Information Commissioner (OAIC) released a draft resource to assist businesses with the obligation to assess a suspected data breach.
The OAIC resource makes it very clear the obligation is not only to assess the relevant circumstances, but to have in place adequate:
Practices
Policies
Procedures
View entire article here.