Data Breach Policy

Policy

July 2025

The purpose of this Data Breach Policy (DBP) is to provide publicly accessible information about how the CCC will respond to data breaches of CCC information in accordance with the Information Privacy Act 2009.

This Data Breach Policy details: 

• what constitutes an eligible data breach under the IP Act
• the roles and responsibilities for reporting, reviewing and managing eligible data breaches
• the steps involved in responding to an eligible data breach, including the communication strategy as well as review processes to prevent future data breaches.

The CCC Data Breach Policy can be accessed here.