Privacy concerns for Tranche 2 entities
Australia's AML/CTF regime went live for lawyers on 1 July 2026, Jerome Doraisamy and Simone sat down with on The Lawyers Weekly Show to discuss what it actually means for small and mid-sized practices, especially the new need for Privacy Act compliance. If you are caught by AML/CTF, even occasionally, it's not just an AML/CTF question. Once you're a reporting entity, you're also an APP entity under the Privacy Act, regardless of your turnover, for the relevant services. Listen here.
Building cross-functional compliance: Simone Herbert-Lowe speaks at Relativity Fest in Sydney and with Lawyers Weekly
Having a policy on paper is not the same as being compliant. Speaking with Lawyers Weekly following her panel session at RelFest Sydney, Law & Cyber founder Simone Herbert-Lowe explains why courts and regulators are now looking past written policies to ask whether organisations actually put them into practice. She points to a recent Federal Court decision in which a company was penalised $5.8 million after its incident response plan was found to exist in name only, and shares practical ways to break down silos between legal, technology and finance teams, including tabletop exercises that surface risks before an incident does. Read the full article at Lawyers Weekly.
Cyber breaches pose a misconduct risk for law firms
Cyber breaches are no longer just a business risk for law firms - they are a professional conduct risk too.
In this feature for the Law Institute Journal, Simone Herbert-Lowe, founder of Law & Cyber, unpacks how inadequate cybersecurity measures or a slow breach response can expose practitioners to liability under the Privacy Act 1988 (Cth), and, more seriously, findings of unsatisfactory professional conduct or professional misconduct.
Small firms are not exempt. If anything, they are a more attractive target.
The first 48 hours of cyber attack fallout
Law & Cyber’s principal and cyber risk strategist Simone Herbert-Lowe breaks down the critical role of legal counsel in incident response, from preserving legal professional privilege to navigating Australia's complex regulatory notification requirements.
Interview, Law Society of NSW Journal: Cyber resilience: an unseen battle ground
Simone Herbert-Lowe was recently interviewed by the Law Society of NSW Journal exploring what it truly takes to protect client trust and a firm's integrity in an increasingly complex digital landscape.
Finalist, Thought Leader of the Year, Women in Law Awards
Simone Herbert-Lowe has been named as a finalist in the Women in Law Awards 2025 for Thought Leader of the Year. The Women in Law Awards is the most highly regarded awards program across Australia recognising exceptional women in the Australian legal industry. This prestigious national awards program presents an exceptional opportunity for leading women to showcase their achievements, attract more clients, and propel their careers on top of giving them the recognition they deserve.
INTEL Series: Simone Herbert-Lowe on Cybersecurity
Learn key cyber risk strategies for law firms from our discussion with PracticeEvolve, emphasising regulatory standards, risk management, and cybersecurity best practices.
Law firms must guard against cybercriminals
The lawyer may be the first person a client will sue if they lose money as the result of a law firm’s cybersecurity breach, says Law & Cyber founder and principal Simone Herbert-Lowe. “That’s because chances are the client is never going to be able to find the cybercriminal and they'll never get their money back.” Join us at the Law Institute of Victoria's 2024 CPD Intensive Day on 26 March 2023.
Simone Herbert-Lowe, Innovator of the Year (Individual) at the 2022 Lawyers Weekly, Women in Law Awards
The awards are considered the gold standard for excellence, providing a unique opportunity for all women across the Australian legal industry — from rising stars through to those in senior ranks — to advance in their careers.
Introducing our new online course 'Cyber Risk and Your Business'
Cyber events can cause significant impact for both customers and the business itself, whether this is through direct financial loss, long term reputational damage or regulatory breaches. Our latest course is specially designed for owners and staff across all Australian businesses.
Fighting real estate cybercrime: Know the risks and stay alert
Unsuspecting real estate agents are being tricked into redirecting funds and disclosing sensitive private information with an increasing number of cyberattacks targeting the Australian property industry.
In The Black: 4 ways to overcome remote working challenges
As remote working becomes the norm, businesses must address concerns around data security and the physical safety of employees.