Data Breach Response Policy
Privacy Act Compliance

Notifiable Data Breaches Scheme Response Plan

Last updated: January 2025

This policy outlines our response procedures for data breaches in compliance with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth). We take data security seriously and have robust measures in place to protect your information.

1. What is a Data Breach?

A data breach occurs when personal information we hold is accessed, disclosed, or lost without authorization. This may include:

  • Unauthorized access to customer databases
  • Accidental disclosure of personal information
  • Lost or stolen devices containing personal data
  • Cyber attacks or hacking incidents
  • Employee misconduct involving personal information
  • System failures resulting in data exposure

2. Eligible Data Breach

An eligible data breach occurs when there is unauthorized access to, or disclosure of, personal information, or loss of personal information, that is likely to result in serious harm to any individual affected.

3. Our Response Process

1

Contain

Immediately take steps to contain the breach and limit any further access or disclosure.

2

Assess

Evaluate the breach to determine its scope, the types of information involved, and potential harm.

3

Notify

If the breach is likely to cause serious harm, notify affected individuals and the OAIC as required.

4

Review

Review the incident to prevent future breaches and improve our security measures.

4. Notification Requirements

If we experience an eligible data breach, we will notify:

Affected Individuals

We will contact you directly via email or phone to inform you of the breach and recommended actions.

OAIC

We will notify the Office of the Australian Information Commissioner within the required timeframe.

5. What We Will Tell You

Our notification will include:

  • The name and contact details of our organization
  • A description of the data breach
  • The kinds of information involved
  • Recommendations about steps you should take in response
  • What we are doing to respond to the breach

6. What You Should Do

If you're notified of a data breach:

  • Change your passwords immediately, especially if login credentials were involved
  • Monitor your financial accounts for suspicious activity
  • Be cautious of phishing emails or calls claiming to be from us
  • Consider placing a ban on your credit file with credit reporting agencies
  • Contact us if you notice anything suspicious

7. Our Security Measures

We employ multiple layers of security to protect your data:

Encryption

Data encrypted in transit and at rest

Access Controls

Strict role-based access to systems

MFA Required

Multi-factor authentication for all staff

Regular Audits

Security assessments and monitoring

8. Report a Suspected Breach

If you believe your information has been compromised or you notice suspicious activity on your account, please contact us immediately:

Phone

QLD: (07) 3473 1988

SA: (08) 7231 1638

Email

security@ragingcommunications.com.au

9. External Resources

Office of the Australian Information Commissioner (OAIC)

Phone: 1300 363 992 | www.oaic.gov.au

IDCARE (Identity & Cyber Support)

Phone: 1800 595 160 | www.idcare.org

Our Commitment: We are committed to protecting your personal information and will respond swiftly and transparently to any data breach incident.