Preparing for the General Data Protection Regulation (GDPR) has been the top priority for privacy professionals in recent months. The GDPR was put forth by the European Union (EU) and goes into effect in May 2018. The regulation includes some of the tightest data breach notification deadlines and potential penalties of any of the existing privacy regulations globally.

But what’s lurking in the shadow of the GDPR? There are other changes to data breach notification regulations that took effect in 2018. Privacy professionals around the world need to take note and tackle these regulations too.

Australia’s Notifiable Data Breaches Scheme

The Notifiable Data Breaches Scheme in Australia, which went into effect in February 2018, requires Australian businesses and government agencies to quickly notify affected individuals of data breach incidents that pose a likely risk of serious harm. Notification to the Australian Information Commissioner will also be required.

Listen to the podcast: What You Need to Know about the Changes to the Australian Privacy Act

Canada’s Personal Information Protection and Electronic Documents Act

Canada’s mandatory notification requirement under the Personal Information Protection and Electronic Documents Act (PIPEDA) was enforced in early 2018. Under PIPEDA, notification to the individual and the Office of the Privacy Commissioner of Canada will be required when there is a real risk of significant harm to the affected individual.

Maryland and Delaware Privacy Regulations

In the U.S., Maryland and Delaware amended their current data breach notification statutes in 2018. Both states are following in the footsteps of several other states by imposing tighter notification time frames. Maryland implemented a 45-day notification timeline, and Delaware will require affected individuals to be notified within 60 days. Both states have also expanded upon their definition of personal information.

Data breach notification requirements are constantly evolving, and organizations globally must ensure they keep up to date with the changes to remain compliant. It’s never too soon to consider future requirements and how they will affect your business practices.

Learn how the IBM Resilient Security Orchestration, Automation, and Response (SOAR) Platform can help make your privacy breach notification process fast, efficient and compliant.

Notice: Clients are responsible for ensuring their own compliance with various laws and regulations, including GDPR. IBM does not provide legal advice and does not represent or warrant that its services or products will ensure that clients are in compliance with any law or regulation. Learn more about IBM’s own GDPR readiness journey and our GDPR capabilities and offerings to support your compliance journey here.

More from Data Protection

Cost of a data breach 2023: Pharmaceutical industry impacts

3 min read - Data breaches are both commonplace and costly in the medical industry.  Two industry verticals that fall under the medical umbrella — healthcare and pharmaceuticals — sit at the top of the list of the highest average cost of a data breach, according to IBM’s Cost of a Data Breach Report 2023. The health industry’s place at the top spot of most costly data breaches is probably not a surprise. With its sensitive and valuable data assets, it is one of…

Cost of a data breach 2023: Financial industry impacts

3 min read - According to the IBM Cost of a Data Breach Report 2023, the global average cost of a data breach in 2023 was $4.45 million, 15% more than in 2020. In response, 51% of organizations plan to increase cybersecurity spending this year. For the financial industry, however, global statistics don’t tell the whole story. Finance firms lose approximately $5.9 million per data breach, 28% higher than the global average. In addition, evolving regulatory concerns play a role in how financial companies…

Advanced analytics can help detect insider threats rapidly

2 min read - While external cyber threats capture headlines, the rise of insider threats from within an organization is a growing concern. In 2023, the average cost of a data breach caused by an insider reached $4.90 million, 9.6% higher than the global average data breach cost of $4.45 million. To effectively combat this danger, integrating advanced analytics into data security software has become a critical and proactive defense strategy. Understanding insider threats Insider threats come from users who abuse authorized access to…

One simple way to cut ransomware recovery costs in half

4 min read - Whichever way you look at the data, it is considerably cheaper to use backups to recover from a ransomware attack than to pay the ransom. The median recovery cost for those that use backups is half the cost incurred by those that paid the ransom, according to a recent study. Similarly, the mean recovery cost is almost $1 million lower for those that used backups. Despite this fact, the use of backups is actually falling. This was one of the…