DraftCore document · Draft v0.1
Data Breach Response Policy
How we respond to and notify people about data breaches.
This is a working draft prepared for internal review. It is not legal advice and has not yet been reviewed or approved by a qualified lawyer. Do not rely on it until it has been finalised.
1. Scope
This policy applies to any actual or suspected unauthorised access to, or disclosure of, personal information held by DIYDG through Kunjur Connect.
2. Notifiable Data Breaches
Where a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.