Amendments Schedule 1 Schedule 1—Amendments Privacy Act 1988 1 Subsection 6(1) Insert: at risk from an eligible data breach has the meaning given by section 26WE. eligible data breach has the meaning given by Division 2 of Part IIIC. 2 After subsection 13(4) Insert: Notification of eligible data breaches etc. (4A) If an entity (within the meaning of Part IIIC) contravenes subsection 26WH(2), 26WK(2), 26WL(3) or 26WR(10), the contravention is taken to be an act that is an interference with the privacy of an individual. 3 After Part IIIB Insert: Part IIIC—Notification of eligible data breaches Division 1—Introduction 26WA Simplified outline of this Part No. 12, 2017 • This Part sets up a scheme for notification of eligible data breaches. • An eligible data breach happens if: (a) there is unauthorised access to, unauthorised disclosure of, or loss of, personal information held by an entity; and Privacy Amendment (Notifiable Data Breaches) Act 2017 Authorised Version C2017A00012 3