The extraterritorial reach of the General Data Protection Regulation (GDPR) has put privacy on the business roadmap in Australia in a way that dwarfs the introduction of the notifiable data breach regime in February.

GDPR is bringing the risks of privacy to management and boardrooms with a new focus on data governance as privacy becomes mainstream and privacy risk becomes a central part of the business risk landscape.

Breaches continue on a daily basis and fines continue to be levied by a range of regulators.

While cyber breaches are part of the equation, human error continues as a key underlying cause of privacy breaches, and is the reason we think that 2019 will be a year in which GDPR becomes ubiquitous.

This publication does not deal with every important topic or change in law and is not intended to be relied upon as a substitute for legal or other advice that may be relevant to the reader's specific circumstances. If you have found this publication of interest and would like to know more or wish to obtain legal advice relevant to your circumstances please contact one of the named individuals listed.