07/10/2026
If your business collects customer information, even something as simple as names and email addresses, the Privacy Act 2020 already applies to you.
If a data breach happens and it's likely to cause someone serious harm, you're legally required to report it, both to the Privacy Commissioner and often to the people affected. Not realising a breach happened isn't a defence.
Most businesses only start thinking about this once something's already gone wrong.
A quick review now, of what you collect, how it's stored, and what your team actually does if something goes wrong, can save a much bigger headache later.
Get in touch with our commercial team to check where your business stands.