Cyber breaches are no longer just a business risk for law firms - they are a professional conduct risk too.

In this feature for the Law Institute Journal, Simone Herbert-Lowe, founder of Law & Cyber, unpacks how inadequate cybersecurity measures or a slow breach response can expose practitioners to liability under the Privacy Act 1988 (Cth), and, more seriously, findings of unsatisfactory professional conduct or professional misconduct.

Small firms are not exempt. If anything, they are a more attractive target.

Law & Cyber’s principal and cyber risk strategist Simone Herbert-Lowe breaks down the critical role of legal counsel in incident response, from preserving legal professional privilege to navigating Australia's complex regulatory notification requirements.

Simone Herbert-Lowe was recently interviewed by the Law Society of NSW Journal exploring what it truly takes to protect client trust and a firm's integrity in an increasingly complex digital landscape.

Simone Herbert-Lowe has been named as a finalist in the Women in Law Awards 2025 for Thought Leader of the Year. The Women in Law Awards is the most highly regarded awards program across Australia recognising exceptional women in the Australian legal industry. This prestigious national awards program presents an exceptional opportunity for leading women to showcase their achievements, attract more clients, and propel their careers on top of giving them the recognition they deserve.

Learn key cyber risk strategies for law firms from our discussion with PracticeEvolve, emphasising regulatory standards, risk management, and cybersecurity best practices.

The lawyer may be the first person a client will sue if they lose money as the result of a law firm’s cybersecurity breach, says Law & Cyber founder and principal Simone Herbert-Lowe. “That’s because chances are the client is never going to be able to find the cybercriminal and they'll never get their money back.” Join us at the Law Institute of Victoria's 2024 CPD Intensive Day on 26 March 2023.

The awards are considered the gold standard for excellence, providing a unique opportunity for all women across the Australian legal industry — from rising stars through to those in senior ranks — to advance in their careers.

Cyber events can cause significant impact for both customers and the business itself, whether this is through direct financial loss, long term reputational damage or regulatory breaches. Our latest course is specially designed for owners and staff across all Australian businesses.

Unsuspecting real estate agents are being tricked into redirecting funds and disclosing sensitive private information with an increasing number of cyberattacks targeting the Australian property industry.

As remote working becomes the norm, businesses must address concerns around data security and the physical safety of employees.