DRAFT laws will be introduced to parliament to force businesses and government agencies to disclose privacy breaches.
Attorney-General Mark Dreyfus says there have been some "spectacular" recent examples of data breaches where names and personal information have been disclosed publicly - via Sony Playstation, Australia Post, Vodafone and Telstra.
He says the draft laws to be introduced to parliament today could pass through parliament before the September election.
Mr Dreyfus said for most companies that already had "good data hygiene", the changes won't present too much of a challenge.
The measures were recommended by the Australian Law Reform Commission in 2008.
Under the plan, affected customers and the Office of the Australian Information Commissioner will have to be notified of data breaches.
The notification requirements only apply to data breaches where there is risk of serious harm.
The commissioner will be able to seek civil penalties if there is serious or repeated non-compliance with the notification requirements.
Meanwhile, Senate Estimates continue on Tuesday. Departmental officials from Environment and Communications, Finance and Public Administration, Legal and Constitutional Affairs and Rural and Regional Affairs and Transport will front hearings in Canberra.
