Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site, how to opt out, and how to disable cookies altogether.

We respect your Do Not Track preference.

From 1 December 2020 it became mandatory to notify the Office of the Privacy Commissioner of privacy breaches that have caused, or have the potential to cause, serious harm to people. 

Between 1 December 2020 and 30 November 2021, we received a total of 750 privacy breach notifications, nearly four times as many as between 1 December 2019 and 30 November 2020. You can use our tool to help you determine whether you need to notify us of your breach and to complete the notification if you do.

One year after the Privacy Act 2020 took effect, this report investigates the impact of mandatory privacy breach reporting.

Read ‘Privacy Breach Reporting’ (opens to PDF, 506KB).