OAIC puts MSPs on notice over data breach reporting
In the latest Notifiable Data Breaches Report [pdf] which covered the second half of 2020, the Commissioner warned MSPs that it was the responsibility of both the holder and the customer to determine which party would report a data breach to the Government. The OAIC said it had received a number of notifications involving an MSP hosting or holding data on behalf of one or more customers. The OAIC has stated that it considers a data breach at a customer to be a data breach at the MSP and vice versa. While both entities are not required to report, at least one is and the OAIC warned that MSPs ...
Source: crn.com.au