Australia: Cybersecurity

Australia's Department of Home Affairs has released proposed changes to the Security of Critical Infrastructure Act 2018 following an independent review. The amendments introduce enhanced obligations for high-risk asset classes, including stricter cyber security requirements, supply chain vulnerability mapping, and personnel security measures. Organizations managing critical infrastructure assets must now prepare for comprehensive regulatory changes that will fundamentally reshape how they protect essential

In a key decision against an Australian financial services licence (AFSL) holder, the Federal Court of Australia has ordered the AFSL holder to pay AU$2.5 million in penalties for inadequate cybersecurity measures.

Artificial intelligence is reshaping corporate governance in two critical ways: boards must defend against increasingly sophisticated AI-powered cyber attacks while simultaneously navigating the responsible use of AI tools in their own decision-making processes. Recent regulatory guidance from ASIC and a landmark Federal Court decision establish new expectations for how directors should manage AI-related risks and leverage AI capabilities while fulfilling their fiduciary duties.

Service providers should seek tailored advice to navigate this complicated area of regulation.

The Federal Court has handed down its reasons in Australian Securities and Investments Commission v FIIG Securities...

The cyber and data security landscape continues to evolve at pace. It can be challenging to keep up, so we have collated our "top 10" cyber stories from the last month, so you don't have to.

Australian Clinical Labs and the OAIC presented an agreed civil penalty position of $5.8m to the Federal Court arising from a 2022 data breach affecting 223,000 customers.

In this episode, we cross examine Tamir Maltz, Barrister at 12 Wentworth Selborne Chambers, Sydney.

Key developments in Australia's cyber regulatory framework over the past 12 months.