In an Op-Ed for CSO, Chris Strand, global senior director of compliance at Carbon Black, writes that while Australia’s privacy law is a good first step, it does not go far enough to incorporate all business entities, and notes “a few obvious holes” in the law. Strand says that while financial penalties are included for those who fail to comply with the law, they are significantly lower than other privacy mandates, such as the standards put forth in the EU General Data Protection Regulation. The law also excludes companies under $3 million in turnover from breach disclosure regulations. “The key,” Strand writes, “is to ensure that security controls required by compliance regulations are enforceable and measurable. This has always been a gap in the past, where security and regulations have never filled the breach.”
Full Story