Small Businesses

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

X

Y

Z

Compliance

Simple definitions of data, privacy, and regulatory compliance terms.

Terms

Yield Compliance Report

A report documenting that a financial product, investment, or business activity has met applicable yield targets or regulatory requirements relating to financial returns.

Year-End Compliance Review

A periodic review conducted at the end of a financial or calendar year to assess an organisation's adherence to applicable laws, regulations, and internal policies.

Youth Employment Compliance

Adherence to laws and regulations governing the employment of workers under the minimum working age or within protected age categories, including restrictions on hours, roles, and conditions of work.

Zero Tolerance Policy

An organisational policy that mandates consistent, non-discretionary consequences for specific categories of serious misconduct, without allowance for mitigating circumstances.

Zone Compliance Certificate

A formal document issued by a regulatory authority or certifying body confirming that a premises, facility, or activity complies with applicable zoning laws, planning requirements, or designated operational standards.

Zero-Day Vulnerability Protocol

A documented incident response procedure for identifying, containing, and remediating vulnerabilities for which no vendor patch is currently available.

Data Retention Failure

The inability to preserve data according to legal, operational, or contractual requirements.

Data Retention Period

The Data Retention Period is the length of time data (including logs or communications) is required or chosen to be stored.

Data Subject Access Request (DSAR)

A DSAR is a request by an individual to obtain the personal information an organisation holds about them.

Eligible Data Breach

An Eligible Data Breach is the term used under the Privacy Act to describe a data breach involving personal information that is likely to result in serious harm and has not been mitigated, triggering mandatory notification obligations under the NDB scheme.

Mandatory Ransomware Payment Reporting laws

Australia's world-first mandatory ransomware payment reporting laws, enacted under the Cyber Security Act 2024, requires businesses with an annual turnover exceeding AUD$3 million and critical infrastructure operators to report ransomware payments within 72 hours.

Notifiable Data Breaches (NDB) scheme

The NDB scheme is a legal obligation under the Australian Privacy Act which requires certain organisations to notify affected individuals and the OAIC when a data breach involving personal information is likely to result in serious harm.

Notification Failure

Notification Failure occurs when an insured fails to notify their insurer of a claim, incident, or circumstance within the timeframes specified in the policy.

Privacy Impact Assessment (PIA)

A PIA is a process to evaluate how a project or system affects personal information privacy.

Personal Information

In Australia, "Personal Information" has a specific legal meaning under the Privacy Act 1988 (Cth) and is defined as information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not, and whether it is recorded in a material form or not.

We are digitising commercial insurance and risk management for small, mid-market and technology businesses. We work with a global network of underwriters, challenging legacy brokers and delivering market leading coverage to our customers.

© 2026 upcover Pty Ltd ABN 17 628 197 437, Corporate Authorised Representative (CAR 1299211) of Experience Insurance Services Pty Ltd ABN 41 657 596 506, AFSL 539078. upcover arranges insurance products with selected insurers and underwriters. upcover does not compare all general insurers or insurance products available in the market.

The information contained on this website is general advice only and has been prepared without taking into account your individual needs, objectives and financial situation. It should not be relied upon as advice. All insurance products are subject to the terms, conditions, limits and exclusions contained in the relevant policy wording and Product Disclosure Statement. Before deciding whether a particular insurance product is right for you, please consider your personal circumstances and read the relevant Product Disclosure Statement, Target Market Determination, Policy Wording, and Financial Services Guide.