Sign up for free to receive our blogs, regulatory alerts, and monthly updates
Sign upCyber
Mismanaging client data can cost you! Lessons to be learned from Equifax
30 Jun 2019Late 2018, UK based Equifax Ltd was issued with a penalty of 500,000GBP by the Information Commissioner (UK) (the Commissioner) in relation to a privacy breach. The breach occurred under…...
Read moreData breaches are big news, but don’t forget the privacy basics
20 Dec 2019From February 2018 onward, the notifiable data breaches (NDB) regime introduced new obligations for Australian government agencies and private sector organisations that were already subject to the Privacy Act 1988…...
Read moreConsumer Data Right access expanded to ‘trusted advisers’
05 Apr 2022Important changes have been made to the Consumer Data Right (CDR) Rules that enable ‘trusted advisers’ to access consumer data via the CDR regime, including suitably accredited financial advisers, lawyers,…...
Read moreWeathering the Storm: Cybersecurity and managing information in the wake of the Optus & Medibank privacy data breaches
03 Feb 2023Historically, businesses have kept documents to 'be on the safe side'. But, as we now see in the wake of last year’s Optus and Medibank data breaches, this approach is not without…...
Read moreThe GDPR and Australia
01 May 2023What is the GDPR? The GDPR The Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) (GDPR) sets out the rules in relation to…...
Read moreRegulation and risk collide: managing information as an AFS licensee
01 May 2023With the recent spate of data breaches now extending to the financial services industry, Australian financial services licensees are racing to ensure that their information management procedures are up to…...
Read moreYou’ve just suffered a ‘cyber’ incident – What are the legal risks?
02 Apr 2024Ask Optus. Its 14-hour national outage on 8 November 2023 led to a Parliamentary inquiry, the resignation of its then CEO, and loss of trust across the market. While it…...
Read moreASIC v HSBC: Is “adequacy” enough to manage cybersecurity risk?
20 Dec 2024While Optus and Medibank come to mind when we think of cyber incidents, ASIC is increasingly enforcing its regulatory priority of licensee failures to have adequate cyber-security protections. Think RI…...
Read more