Last month, the OAIC released a Revised Guide to Information Security for public consultation. The Guide was originally published in April 2013, to de-mystify the obligation under the Privacy Act 1988 (the Act) to take ‘reasonable steps’ to keep personal information secure. It provides much needed practical guidance, by explaining what steps and strategies the