Cyber risk is a board issue: directors’ duties and data breaches
Why cyber security is now a governance question for Australian directors, what regulators expect, and the questions boards should be asking.
-
-
SaaS contracts: 10 clauses Australian businesses should check before signing
Data ownership, security, service levels, price increases and exit rights: the SaaS and cloud contract clauses that matter most, and what to negotiate.
-
The under-16 social media rules: what businesses need to know
Since 10 December 2025, age-restricted social media platforms must take reasonable steps to keep under-16s off. Who is caught, the penalties, and what it means for other businesses.
-
Children’s Online Privacy Code: does it apply to your business?
The OAIC must register a Children’s Online Privacy Code by 10 December 2026. Who it is likely to cover and how to prepare.
-
Website privacy policy checklist for Australian businesses (2026)
What an Australian privacy policy must contain under APP 1, the common gaps the OAIC looks for, and the new automated decision-making disclosures.
-
Suing for invasion of privacy in Australia: the statutory tort explained
Since 10 June 2025 Australians can sue for serious invasions of privacy. What a claimant must prove, the defences, and what it means for businesses.
-
Privacy Act Tranche 2: what the 2026 exposure draft means for business
The Privacy Amendment (Personal Data Protection) Bill 2026 exposure draft proposes around 40 changes to the Privacy Act. Here are the ones businesses should plan for.
-
Automated decision-making and your privacy policy: what changes on 10 December 2026
From 10 December 2026, privacy policies must explain automated decisions that could significantly affect individuals. Here is who is caught and what to disclose.
-
Ransomware in Australia: what to do and the 72-hour payment reporting rule
How ransomware attacks work, why law firms and small businesses are targets, and the legal duties that apply if you are hit, including the 72-hour ransom payment report.
-
Domain name scam warning: fake renewal and registration notices
Australian domain name holders regularly receive misleading emails and invoices about renewals or foreign registrations. How to recognise them and what to do.
