Topics
- Compliance and Regulation
- Technology and Cyber Risk
Who is the OAIC?
The Office of the Australian Information Commissioner (OAIC) is an independent national regulator whose purpose is to promote and uphold individuals’ rights to privacy under the Privacy Act 1988 and information under the Freedom of Information Act 1982.
What are Notifiable Data Breaches?
Under the aforementioned legislation, organisations and agencies are required to inform the affected individuals and the OAIC if a data breach is likely to result in serious harm to anyone whose personal information is involved.




How to strengthen your organisation against a data breach
The OAIC issued a report this year, outlining six key themes and recommendations for public and private organisations to strategically safeguard personal information. The below outlines Amstelveen’s view of the key Preventative, Detective and Corrective controls that help protect organisations against common themes that can compromise personal information.


Data breaches are only increasing in frequency, complexity and impact for organisations of all sizes and sectors. A proactive risk management approach is therefore crucial to guide resilient cyber security to keep personal and confidential information safe. Amstelveen is well positioned to support clients prepare themselves against data breaches, with extensive experience in the development and assessment of preventative, detective and corrective controls. Contact us at info@amstelveen.com to discuss how we can help.
References
OAIC. (2024). Notifiable Data Breaches Report: January to June 2024. Available at:
https://www.oaic.gov.au/privacy/notifiable-data-breaches/notifiable-data-breaches-publications/notifiable-data-breaches-report-january-to-june-2024 (Accessed: October 2024)
Key Insights from the OAIC’s 2024 Half-Year Report

