Notifiable Data Breach (NDB)

Under the Notifiable Data Breach scheme, organisations must report to the Office of the Australian Information Commissioner (and affected individuals) any breach likely to result in serious harm — increasingly including AI-related incidents such as a chatbot exposing customer records or a misconfigured AI pipeline leaking training data. NDB filings are one of the primary public data sources behind the Incidents dimension of the Index.

Definitions are written for enterprise AI governance context, not a formal legal standard. Suggest a correction →