Articles & Analysis.
Practical, legally grounded analysis of the cyber, privacy and technology issues affecting Australian businesses — written by practitioners who advise on these matters every day.
Our articles are written for the people who carry responsibility in their organisations — general counsel, chief risk officers, CFOs, business owners and directors who need to understand what is happening in cyber and privacy law and what it means for them.
We write about Australian law, Australian regulation and Australian cases — because that is what our clients face. When a new piece of legislation passes, a significant breach makes headlines or a court decision shifts the liability landscape, we explain what it means in plain terms and what your organisation should consider in response.
Our content is not marketing. It is the same quality of analysis we bring to our advisory and legal work — offered here so that you can stay informed between engagements.
FEATURED
Generative AI and the Australian practitioner: an update on court expectations, professional risk and what your firm needs to do
Twelve months ago, Australian lawyers were asking whether they needed an AI policy. That question has been clearly answered. On 16 April 2026, Chief Justice Mortimer issued the Federal Court’s General Practice Note on Generative AI (GPN-AI), applying to everyone in proceedings: lawyers, litigants, witnesses and third parties. The NSW Supreme Court’s Practice Note SC Gen 23 has been in force since 3 February 2025. The Supreme Court of Victoria has issued its own Guidelines for Responsible Use of Artificial Intelligence in Litigation.
Digital ID in your practice: A Guide for Firms and Their Clients
The Australian Government’s Digital ID Scheme is being expanded to encompass state governments and the private sector via a newTrusted Digital ID Framework. For law firms, Digital ID can streamline identification processes and reduce risks.
When clients and customers become victims
Data breaches at scale: implications of the Optus and Medibank breaches.
Cybersecurity – a matter of trust
The recent spate of reported cyber-attacks is likely due to both increased frequency and greater reporting obligations under Australian law.
Cyber extortion – legal and ethical considerations if you receive a ransom demand
The choice between paying a ransom and either losing all your business records or seeing confidential client information lost or published is one that no practitioner ever wants to make.
Our resources may be accessed for non-commercial or personal use only. No part of this website or its content — including publications — may be copied, used, adapted, published or distributed without the prior written approval of Law & Cyber. For details see our Website Terms of Use.
AML/CTF Tranche 2 reform has generated significant attention across the legal profession. What has received far less focus is the privacy consequence that arrives with it. For many law practices, 1 July 2026 does not just mark the start of anti-money laundering obligations, it marks the first time the Privacy Act 1988 (Cth) has ever applied to their practice.