In the first full quarter following the implementation of its mandatory data breach reporting rules, the Office of the Australian Information Commissioner received an average of 2.6 data breach notifications per day, evidence the new regime is working, the regulator said.