Privacy and Data Protection

HIPAA compliance in Australia is not a thing, and if a vendor has told you otherwise you should ask them what they meant. HIPAA is United States legislation. It has no force here, no Australian regulator enforces it, and a certificate saying your software is HIPAA compliant tells you nothing…

The notifiable data breaches scheme does not give you 72 hours. That number comes from the European GDPR, it has been repeated into Australian folklore, and acting on it will send you down the wrong path at the worst possible moment. The same borrowing happens with HIPAA, which has no…