By: Kieran Doyle, Nicole Gabryk, Stephen Morrissey, Joseph Fitzgerald, Amanda Beattie, Nick Martin, Rakhee Dullabh, Christy Mellifont, Rebecca Wilson, Laura GlassonMathew Harty, Madeline McLean, Finn Speirs and Olive Huang


Issue 11 of our Cyber, Privacy & Technology Report is here! Covering key developments and insights for insurers, brokers, and their customers operating in the cyber, privacy, and technology sectors.

This issue covers significant updates in Australia, including ASIC pursuing another AFSL holder for alleged cybersecurity failures, and amendments to the Privacy Act and Cyber Security Act set to commence. Meta has also settled with the OAIC for $50 million, while Oxfam Australia has agreed to an enforceable undertaking.

Compensation was awarded in ATQ v Services Australia, and the New Scams Prevention Framework Act aims to combat fraud. ASIO’s 2025 Threat Assessment also warns of critical infrastructure risks, and new guidance on privacy in generative AI.

In New Zealand, the HRRT decision in BMN v Stonewood Group Limited clarifies damages under the Privacy Act 2024, the OPC’s 2025 priority around children’s privacy, and New Zealand advancing Budapest Convention implementation.

Additionally, a government inquiry examines failures in safeguarding personal information, and the Biometrics Code of Practice moves forward.

We hope you find this edition both insightful and practical in navigating the ever-evolving cyber and technology landscape.

If you’d like to discuss any of the topics covered, please don’t hesitate to reach out to a member of our team or click here to find out more.