On February the 22nd, 2018 new privacy laws come into effect to regulate the reporting and notification of eligible data breaches to the Office of the Australian Information Commissioner (OAIC) and impacted individuals. Please see the link below for more information. https://www.oaic.gov.au/privacy-law/privacy-act/notifiable-data-breaches-scheme