The Australian Privacy Act puts an obligation on APP entities to, among other things, protect the privacy of individuals and to also have an open, transparent and secure approach to the handling of any personal information.
An APP entity is a business within an annual turnover of more than $3 million.
Under the Privacy Act, APP entities are subject to a data breach notification regime which requires that they notify individuals when a data breach occurs which is likely to result in serious harm to those individuals. These notifications could destroy your business and harm your reputation.
Under the Privacy Act, APP entities are required to have APP Privacy Policies, and for those that provide Credit Reporting Privacy Policies. APP entities are also subject to a data breach notification regime which requires that they notify individuals when a data breach occurs which is likely to result in serious harm to those individuals. These notifications could destroy your business and harm your reputation.