4 articles
Many UK businesses have to pay an annual data protection fee to the ICO, even though there is no registration form. Here is who pays, who is exempt, and what a missed payment costs.
Most startups under $3 million turnover are not legally required to have a privacy policy in Australia, but key exceptions apply. Here is how to check.
Misdirected emails, lost laptops and buggy code can all trigger a duty to report to the ICO. Here's how to work out if this is one of them, and what to do next.
If your business holds personal information and suffers a data breach, you may have 30 days to notify the OAIC and affected individuals. Here is what triggers the obligation, what your notification must include, and what happens if you get it wrong.