Enforcement and penalties under the Privacy Act 1988 (Cth)

Failure to comply with obligations under the mandatory data breach notification regime will be deemed to be an interference with the privacy of an individual and a breach of the Privacy Act 1988 (Cth) (the Act). This will engage the Privacy Commissioner’s enforcement powers under the Act, as well as relevant penalties under the Act.