Notifiable Data Breach Legislation was an amendment to the Privacy Legislation in 2017 which expands the Privacy Legislation requiring a business to notify the Office of the Australian Information Commissioner of any breaches to their information database both from external and internal sources.