← Compliance glossary

Eligible data breach (NDB scheme)

FRT & privacy

Under the Notifiable Data Breaches (NDB) scheme in Part IIIC of the Privacy Act 1988 (Cth), an eligible data breach is one likely to result in serious harm to any individual whose personal information was involved. Reporting entities must notify the OAIC and affected individuals as soon as practicable — generally read as within 72 hours of becoming aware. For FRT deployments, a breach of the biometric-template store typically meets the threshold automatically.

This term sits in the FRT & privacy section of the working glossary — vocabulary covering facial-recognition controls and the Privacy Act 1988 (Cth), including the Australian Privacy Principles and the Notifiable Data Breaches scheme.

Read more

Operational pillar pages

Related terms

Other terms in FRT & privacy