This Data Breach Response Plan sets out the procedure to be followed by ACNC staff in the event that the ACNC experiences a data breach, or suspects that a data breach has occurred.

A data breach occurs when personal information (defined in section 6 of the Privacy Act 1988 (Cth)) is lost or subjected to unauthorised access, modification, use or disclosure or other misuse. Personal information refers to information that identifies or reasonably identifies an individual.