A data breach occurs where personal information has been accessed or disclosed without proper authorisation. If your organisation adheres to the Privacy Act 1988, it is your responsibility to notify anyone affected by a data breach in your organisation where there has been unauthorised access/disclosure of personal information that has the potential to result in serious harm (OAIC, 2020).