Schedule 1 Amendments (2C) An application under paragraph (1)(bc) may only be made by the entity to whom the direction was given. (2D) For the purposes of subsections (2A), (2B) and (2C), entity has the same meaning as in Part IIIC. 6 Application of amendments—eligible data breaches (1) Paragraph 26WE(2)(a) of the Privacy Act 1988 (as amended by this Schedule) applies to an access or disclosure that happens after the commencement of this item. (2) Paragraph 26WE(2)(b) of the Privacy Act 1988 (as amended by this Schedule) applies to a loss that happens after the commencement of this item. [Minister’s second reading speech made in— House of Representatives on 19 October 2016 Senate on 8 February 2017] (158/16) 22 Privacy Amendment (Notifiable Data Breaches) Act 2017 Authorised Version C2017A00012 No. 12, 2017