Late 2023, Attorney-General Mark Dreyfus announced the government would adopt a recommendation from the Privacy Act Review Report to remove the exemption that currently excludes small businesses with a turnover of less than $3 million from having to comply with the Privacy Act and online data protection rules.
If your business deals with personal identity information, including taxation details, or personal health information, you’ll have to comply with the Privacy Act soon
The Australian Cyber Security Centre has advice on what small businesses should be doing to secure personal customer data.
Business should understand:
- what data they currently have
- where it is stored – and is it secure
- is the data backed up – and where
- who can access that data
- what access controls are in place
- is there multifactor authentication enabled
If your business has an IT provider, ask how that company keeps data secure.
You can access a privacy checklist for small business at the Federal Government’s OAIC site.
Related Posts
Late 2023, Attorney-General Mark Dreyfus announced the government would adopt a recommendation from the Privacy Act Review Report to remove the exemption that currently excludes small businesses with a turnover of less than $3 million from having to comply with the Privacy Act and online data protection rules.
If your business deals with personal identity information, including taxation details, or personal health information, you’ll have to comply with the Privacy Act soon
The Australian Cyber Security Centre has advice on what small businesses should be doing to secure personal customer data.
Business should understand:
- what data they currently have
- where it is stored – and is it secure
- is the data backed up – and where
- who can access that data
- what access controls are in place
- is there multifactor authentication enabled
If your business has an IT provider, ask how that company keeps data secure.
You can access a privacy checklist for small business at the Federal Government’s OAIC site.
