On May 13, 2019, the Office of the Australian Information Commissioner (OAIC) published a report titled “Notifiable Data Breaches Scheme 12‑month Insights Report”. The report analyses the last 12 months of the Notifiable Data Breaches (NDB) scheme, which introduced new obligations for Australian companies that have existing information security obligations under the Privacy Act 1988.