Notification of data breaches in Australia: Implications for airlines

The unauthorised access to personal data and its possible misuse has resulted in the vast majority of American states to require notification by datacollectors to individuals whosei nformation has been breached in order both to mitigate damages and to expose those with poor data security systems to public disclosure. The Australian Law Reform Commission's review of the Privacy Act 1988 (Cth) has proposed that such statute be enacted for Australia. This article considers these developments and the potential difficulty for airlines which might arise from being required to comply with such a generic data notification statute as presently formulated.