Breach Reporting Volumes Signal Tougher Enforcement Ahead

Breach reporting volumes are accelerating, with the Information Regulator’s 2025/26 Strategic Plan recording 1,727 security compromise notifications in 2024/25 and projecting close to 2,500 in the year ahead. Within the same plan, the Information Regulator highlights expanded enforcement capacity and persistent non-compliance around Information Officer registrations.

For scaling technology businesses, this signals a shift from theoretical oversight to practical enforcement. Incident response playbooks, vendor breach notification clauses, and escalation authority are now commercial necessities rather than compliance hygiene.