By: Kieran Doyle, Nicole Gabryk, Stephen Morrissey, Joseph Fitzgerald, Ian Johnston, Sorawat W., Ellie Brooks, Carren Thung, Rebecca Wilson, Jordan Chen, Nuttida Doungwirote, Aimee Johnston, Kayleigh Maxwell and Danyon Soligo.

Issue 12 of our Cyber, Privacy & Technology Report is here! Covering key developments and insights for insurers, brokers, and their customers operating in the cyber, privacy, and technology sectors.

This issue covers significant updates in Australia, including a new statutory tort for invasions of privacy becoming law. New cyber reporting obligations have commenced – including mandatory reporting of ransom payments for certain businesses, and cyber incident reporting obligations for data storage asset operators. Meanwhile, a new mandatory data breach reporting scheme has commenced in Queensland.

In technology, the Federal Court of Australia has ordered the owner of a software patent to provide security for costs in proceedings for alleged patent infringement, while the CrowdStrike outage from 2024 continues to be contested in courts.

In New Zealand, there’s new redress mechanisms for victims of fraud, while Māori data sovereignty takes a spotlight following the country’s privacy week. In Thailand, there’s major enhancements to its cybercrime prevention framework, and in Singapore, we look at guidelines for children’s data and privacy.

We hope you find this edition both insightful and practical in navigating the ever-evolving cyber and technology landscape.

If you’d like to discuss any of the topics covered, please don’t hesitate to reach out to a member of our team or click here to find out more.