10Identity protection and recovery functions

10 Identity protection and recovery functions

10 Identity protection and recovery functions

The identity protection and recovery functions are as follows—

(a) to advise on and recommend actions—

(i) to detect, prevent and mitigate the likelihood of personal data compromises, and

(ii) to mitigate the risk of harm to individuals and impacted individuals in relation to personal data compromises,

(b) to increase resilience and protection of persons from personal data compromises, including by advising on the appropriate kind and use of information technology,

(c) in response to a personal data compromise—

(i) to advise on and recommend actions to take, including to replace or reissue identity documents and other actions to protect and recover personal information, and

(ii) to advise on and assess the risk of harm to impacted individuals, and

(iii) to notify and disclose information to impacted individuals and other persons, including to assist persons in notifying impacted individuals,

(d) other functions prescribed by the regulations.