As required in the cross government data handling review and to facilitate greater openness and transparency of data security breaches, Departments are required to report on significant personal information security breaches in their annual resource accounts. The first summary reports by Departments were published in their annual resource accounts at the end of the 2007-08 reporting year and these have now been followed by the 2008-09 accounts. These reports are publicly available through departmental websites.