Australian businesses have been warned they can no longer keep quiet about cyber security breaches, after the Senate passed laws mandating their disclosure 15 years after they were introduced in the US.

Under the long-anticipated Notifiable Data Breaches Bill, which passed the Senate on Monday, any organisation that is accountable to the Privacy Act will be required to inform the Australian Information Commissioner and members of the public if their data has been compromised.