In this episode, Commercial and Technology Partner Peter Fernando and Litigation Special Counsel Jonathan Forsey unpack some high-profile data breaches in New Zealand and Australia, outline some of the key principles of the Privacy Act 2020 and explain how to determine when a cyberattack is a notifiable privacy breach. They also discuss how businesses, government agencies and other organisations can mitigate the impact of a cyberattack by creating a robust response policy.
“…When we think about the new Privacy Act and the mandatory breach notification obligations…that assessment of whether there is a likelihood of serious harm is critical in terms of where the organisation needs to notify the privacy commissioner, but also if they need to notify the individual concerned."
- Commercial and technology law expert Partner Peter Fernando.