In early September, there was good news out of the Office of the Australian Information Commissioner (OAIC). Its most recent report on notifiable data breaches in Australia showed that notifications from January to June this year had dropped compared to the second half of 2022. At that time, Australia had been rocked by the enormous cyberattacks on Medibank and Optus as well as three separate data breaches that had compromised the private information of millions of Australians.