Privacy and Other Legislation Amendment Bill 2024 passed

By: Kieran Doyle, Nicole Gabryk and Rakhee Dullabh At a glance Most parts of the Privacy and Other Legislation Amendment Bill 2024 (Cth) start the day after Royal Assent. However, APP1 changes for automated decision-making take effect in 24 months, and the new statutory tort for serious invasions of privacy starts within 6 months or […]

Breaking down the Cyber Security Act 2024 and amendments to the SOCI Act

By: Kieran Doyle, Nicole Gabryk and Rakhee Dullabh At a glance The new Act strengthens safeguards for individuals, businesses, and critical infrastructure, enhancing Australia’s resilience to cyber threats. Businesses must report significant cyber incidents, including ransomware demands and payments, ensuring improved visibility and coordinated responses. The act updates standards for IoT devices, expands critical infrastructure […]

Trend Watch: What’s next? – data breach class actions

Following the Optus and Medibank data breaches in 2021-2022, the increase in litigation has triggered a range of new considerations and developments in the space. In our latest Trend Watch video on data breaches, Cyber, Privacy + Technology partner Nicole Gabryk and Commercial Litigation special counsel Gavin Davies discuss the increasing activity of regulators, litigants […]

Trend Watch: Privilege during investigations – data breach class actions

With litigation escalating across data breaches and privacy class actions, there are new questions around legal privilege when obtaining forensic reports. As part of our Trend Watch video series, Cyber, Privacy + Technology partner Nicole Gabryk and Commercial Litigation special counsel Gavin Davies discuss privilege claims arising from the Optus and Medibank data breaches in 2021-2022, […]

Trend Watch: Current state of play – data breach class actions

The 2021–2022 Optus and Medibank cyber incidents have sparked an uptick of litigation in the data breach and privacy class action space, raising important questions for the trajectory of similar matters going forward. In the second instalment of our Trend Watch video series, Cyber, Privacy + Technology partner Nicole Gabryk and Commercial Litigation special counsel […]

Current landscape of cyber sanctions in Australia – October 2024

By: Kieran Doyle, Nicole Gabryk, Rakhee Dullabh and Rebecca Wilson At a glance In early October 2024, Australia imposed sanctions on three Russian nationals linked to the Evil Corp cybercrime group. The Cyber Security Bill 2024 aims to strengthen Australia’s defences against ransomware and cyber threats. Businesses must seek legal guidance to ensure compliance with […]

Cyber, Privacy + Technology Report – Issue 9, September 2024

By: Kieran Doyle, Nicole Gabryk, Stephen Morrissey, Joseph Fitzgerald, Amanda Beattie, Nick Martin, Rakhee Dullabh, Christy Mellifont, Rebecca Wilson, Jonathon Ferraro and Natasha Chand We are delighted to share Issue 9 of our Cyber, Privacy + Technology Report – our quarterly wrap-up of relevant news for insurers, brokers and their customers doing business in Australia […]

CrowdStrike and contractual limitation clauses

By: Stephen Morrissey, Nick Martin and Christy Mellifont At a glance After a software update by cybersecurity firm CrowdStrike caused a global outage, legal experts in the US have speculated the company is protected from paying customers’ losses due to a contractual limitation of liability clause in its standard terms and conditions. In this article, […]

Get to know Thomas Cavanagh, new partner and financial services specialist

What made you decide to become a lawyer? Other than the usual desire to argue a point with everyone and shows like Boston Legal (aged very poorly, I know), I like the fact that the law is not actually made up of rigid principles but rather can be moulded to suit particular circumstances, and that’s […]

The IT professionals claims landscape in 2023

Claims against IT professionals following cyber events continue to be on the rise. Businesses including managed services providers (MSPs) and cloud services providers (CSPs) that are responsible for hosting data on behalf of their clients continue to be common targets for cyber criminals. While MSPs and CSPs are not always the direct victims of a […]