Australians are increasingly concerned about how companies handle their personal data, especially online. Faced with the increasing likelihood that this data will be compromised, either through cyber attacks or mishandling, companies are now being forced into a more comprehensive approach to collecting and protecting customers’ personal data. The question remains - what is the best approach to achieving this goal?