Office of the Australian Information Commissioner — NDB Scheme

Fictional teaching environment • Regulatory compliance view • Not legal advice

Eligible Data Breach Test

Under assessment

All three elements must be satisfied.

ElementAssessment
Unauthorised access or disclosurePossible (alleged exfiltration)
Personal information involvedLikely (client records)
Likely to result in serious harmUnder analysis

Factors considered

  • Sensitivity of data
  • Nature of threat actor
  • Mitigating actions (containment, encryption)
  • Evidence vs screenshots