High profile cyber attack cases (Optus, Medibank and Latitude to name a few) serve as cautionary tales of how data breaches can cripple a business and expose individuals to serious harm. While malicious attacks are often the ones which attract headlines, privacy breaches may also be caused by human error, misconfigured systems and/or unintended disclosures. Despite being one of the most significant risks facing Australian businesses today, privacy laws are often poorly under