Australia: Technology

APRA is the authority responsible for the prudential regulation of banks, insurers, and superannuation trustees in Australia. The authority expressed concerns after its targeted review of APRA-regulated entities found that there was an increasing lag between the adoption of emerging AI technologies, and the implementation of appropriate risk management strategies.

Australia's Department of Home Affairs has released proposed changes to the Security of Critical Infrastructure Act 2018 following an independent review. The amendments introduce enhanced obligations for high-risk asset classes, including stricter cyber security requirements, supply chain vulnerability mapping, and personnel security measures. Organizations managing critical infrastructure assets must now prepare for comprehensive regulatory changes that will fundamentally reshape how they protect essential

In a key decision against an Australian financial services licence (AFSL) holder, the Federal Court of Australia has ordered the AFSL holder to pay AU$2.5 million in penalties for inadequate cybersecurity measures.

The general rule is that a business cannot send unsolicited emails to market, sell, and promote their goods and services.

"Statement Expectations" sets out ACMA views on the minimum requirements needed to comply with the Spam Act.

This heavy penalty was a reminder to all businesses to ensure that their marketing complies with regulations.

AI enabled decision making systems are being increasingly used to determine dynamic pricing, assess credit eligibility, prioritise search results, and moderate content (among other decisions).

ASIC v Bekier & Ors clarifies how governance accountability is likely to be assessed, with courts and regulators focusing on whether governance systems ensure material risks reach the board in time for meaningful oversight rather than individual actions or decisions.

Workplace regulation has entered a phase of convergence, where technology use, data governance, wage integrity and safety obligations are increasingly regulated as interconnected systems.

A new enterprise agreement between Private Media & the Media, Entertainment & Arts Alliance, approved by the FWC restricts the use of AI in editorial work.

This draft legislation is ambitious in scope and represents Australia's answer to comprehensive crypto-asset reforms.

OAIC's recommendations on managing records of messaging apps provide useful lessons and practical solutions.