The Tranche 2 deadline has passed, and thousands of small property law firms and conveyancing practices are now subject to the Privacy Act for the first time  - most without a compliance team in sight.

Developed in consultation with the Australian Institute of Conveyancers NSW Division, Law & Cyber's AML Privacy Toolkit for Property Practices gives small practices the privacy documents and procedures the new regime demands, ready to implement within days, not months. Law & Cyber founder Simone Herbert-Lowe explains why the Toolkit was built, why a privacy policy on paper is not the same as compliance, and why the same resources are now being extended to other newly regulated professions.

Australia's AML/CTF regime went live for lawyers on 1 July 2026, Jerome Doraisamy and Simone sat  down with on The Lawyers Weekly Show to discuss what it actually means for small and mid-sized practices, especially the new need for Privacy Act compliance. If you are caught by AML/CTF, even occasionally, it's not just an AML/CTF question. Once you're a reporting entity, you're also an APP entity under the Privacy Act, regardless of your turnover, for the relevant services. Listen here.

Having a policy on paper is not the same as being compliant. Speaking with Lawyers Weekly following her panel session at RelFest Sydney, Law & Cyber founder Simone Herbert-Lowe explains why courts and regulators are now looking past written policies to ask whether organisations actually put them into practice. She points to a recent Federal Court decision in which a company was penalised $5.8 million after its incident response plan was found to exist in name only, and shares practical ways to break down silos between legal, technology and finance teams, including tabletop exercises that surface risks before an incident does. Read the full article at Lawyers Weekly.

Cyber breaches are no longer just a business risk for law firms - they are a professional conduct risk too.

In this feature for the Law Institute Journal, Simone Herbert-Lowe, founder of Law & Cyber, unpacks how inadequate cybersecurity measures or a slow breach response can expose practitioners to liability under the Privacy Act 1988 (Cth), and, more seriously, findings of unsatisfactory professional conduct or professional misconduct.

Small firms are not exempt. If anything, they are a more attractive target.

Law & Cyber’s principal and cyber risk strategist Simone Herbert-Lowe breaks down the critical role of legal counsel in incident response, from preserving legal professional privilege to navigating Australia's complex regulatory notification requirements.

Simone Herbert-Lowe was recently interviewed by the Law Society of NSW Journal exploring what it truly takes to protect client trust and a firm's integrity in an increasingly complex digital landscape.

Simone Herbert-Lowe has been named as a finalist in the Women in Law Awards 2025 for Thought Leader of the Year. The Women in Law Awards is the most highly regarded awards program across Australia recognising exceptional women in the Australian legal industry. This prestigious national awards program presents an exceptional opportunity for leading women to showcase their achievements, attract more clients, and propel their careers on top of giving them the recognition they deserve.

Learn key cyber risk strategies for law firms from our discussion with PracticeEvolve, emphasising regulatory standards, risk management, and cybersecurity best practices.

Simone Herbert-Lowe delves into the extent to which upholding certain standards regarding cyber security is at the forefront of lawyers’ minds, the expansion of the remit of professional obligations for lawyers, the potential penalties for lawyers who breach standards or civil liability obligations, what lawyers must do in order to ensure best practice and avoid disciplinary findings, and the need for constant vigilance rather than employing a “set and forget” attitude.

The lawyer may be the first person a client will sue if they lose money as the result of a law firm’s cybersecurity breach, says Law & Cyber founder and principal Simone Herbert-Lowe. “That’s because chances are the client is never going to be able to find the cybercriminal and they'll never get their money back.” Join us at the Law Institute of Victoria's 2024 CPD Intensive Day on 26 March 2023.

Simone Herbert-Lowe has been named as a finalist in the Women in Law Awards 2023 for Thought Leader of the Year. The Women in Law Awards is the most highly regarded awards program across Australia recognising exceptional women in the Australian legal industry. This prestigious national awards program presents an exceptional opportunity for leading women to showcase their achievements, attract more clients, and propel their careers on top of giving them the recognition they deserve.

Simone Herbet-Lowe has been recognised as a Security finalist in the 2023 Relativity Fest Innovation Awards. Relativity’s Innovation Awards program celebrates the curious change makers in tech who are making an impact by building custom solutions, empowering people and forging new paths to improve the legal industry and its communities.  

Founder of Law & Cyber Simone Herbert-Lowe is determined to move cyber resilience and security from a compliance-based 'tick the box' education to organisations of all sizes to create a cyber-aware culture. As a practicing lawyer, Simone witnessed firsthand the impact on humans of cyber hacking and now leads a business that educates humans to move from blame to empowerment and prevents 'cyber' strangers from opening the door to important data.

Simone Herbert-Lowe delves into why firms might be a target for different hackers, her practical guidance for boutique firm owners to ensure they are upholding their professional duties and are engaged in best practice, the need to be across proposed legislative changes, the place for limited liability, prioritising urgent needs in anticipation of a possible recession and why boutique firm owners must put themselves forward for recognition for their stellar work.

The awards are considered the gold standard for excellence, providing a unique opportunity for all women across the Australian legal industry — from rising stars through to those in senior ranks — to advance in their careers.

Cyber events can cause significant impact for both customers and the business itself, whether this is through direct financial loss, long term reputational damage or regulatory breaches. Our latest course is specially designed for owners and staff across all Australian businesses.

Simone has been nominated in the “Women in Law” awards, which celebrate the top female professionals in the legal industry across Australia.

RelativityFest’s Innovation Awards celebrate the curious change makers in tech who are making an impact at the individual, organisational, and industry levels.

College of Law caught up with Simone to navigate the murky and complex world of cyber risk, the top 5 threats facing lawyers today - and what you can do to mitigate your risk.

As a lawyer of 30 years, Simone Herbert-Lowe knew cybercrime was a major threat. But it wasn’t until she undertook her AGSM @ UNSW Business School MBA that she discovered how she could help businesses stay one step ahead of the next scam.