New South Wales' updated breach notification framework takes effect

Enforcement of New South Wales' Mandatory Notification of Data Breach Scheme began 28 Nov. Brought on by amendments to the Privacy and Personal Information Protection Act, the notification scheme requires breach reporting to the privacy commissioner's office with breaches of "personal or health information likely to result in serious harm." Covered entities are also obligated to generate and manage a data breach incident register and a publicly-accessible data breach policy.