Data breaches have become front page news recently, prompting the Government to introduce legislation to increase the penalties under the Privacy Act 1988. This article explores the scope of the increased penalties, the OAIC’s enhanced powers and what it means for organisations.