New laws require companies that experience any significant data breach to notify The Office of The Australian Information Commissioner and impacted clients.