The risks to Australian organisations associated with the management of information have been widely discussed amongst business leaders and in the media since changes to The Privacy Act 1998 (Privacy Act) took effect on the 12 March 2014. From our perspective, what has not been discussed is personal liability which relates to employees with a responsibility for the management of organisational information.