Document ID: chunk:federal_register_of_legislation:C2025C00055:section:26wa
Version: federal_register_of_legislation:C2025C00055
Segment Type: section
Provision Reference: s 26WA
Character Range: 309967–310868

26WA  Guide to this Part

         • This Part sets up a scheme for notification of eligible data breaches.
         • An eligible data breach happens if:
             (a) there is unauthorised access to, unauthorised disclosure of, or loss of, personal information held by an entity; and
             (b) the access, disclosure or loss is likely to result in serious harm to any of the individuals to whom the information relates.
         • An entity must give a notification if:
             (a) it has reasonable grounds to believe that an eligible data breach has happened; or
             (b) it is directed to do so by the Commissioner.
         • The Commissioner may obtain information or documents in relation to actual or suspected eligible data breaches.
         • This Part also deals with the collection, use and disclosure of personal information involved in eligible data breaches.