Despite the tightening regulatory framework of General Data Protection Regulation (GDPR) in Europe and Notifiable Data Breach (NBD) legislation over here, gaping holes are prevalent in data protection and security management practices across the country. The latest quarterly mandatory data breach report by the Office of the Australian Information Commissioner (OAIC), suggests that mobile security practices still have some way to go before they are ingrained in the employee mindset.