We all know that technology is continually developing. That development has resulted in vast amounts of personal information being collected and stored digitally by organisations. With that comes an increased risk of cyber threat. Yet, few organisations’ security procedures are as sophisticated as they ought to be, and there are gaps where workplace practices are out of step with the technical controls in place. It is against this background that the Privacy Amendment (Notifiable Breaches) Act 2017 (the Act) was born.