Mandatory data breach notification under the Privacy Act 1988 (Cth), applies to the Commonwealth public sector and the private sector including organisations which hold health information and provide a health service (which is broadly defined). The mandatory breach notification requirements commenced on 22 February 2018.






