Articles & Analysis.
Practical, legally grounded analysis of the cyber, privacy and technology issues affecting Australian businesses — written by practitioners who advise on these matters every day.
Our articles are written for the people who carry responsibility in their organisations — general counsel, chief risk officers, CFOs, business owners and directors who need to understand what is happening in cyber and privacy law and what it means for them.
We write about Australian law, Australian regulation and Australian cases — because that is what our clients face. When a new piece of legislation passes, a significant breach makes headlines or a court decision shifts the liability landscape, we explain what it means in plain terms and what your organisation should consider in response.
Our content is not marketing. It is the same quality of analysis we bring to our advisory and legal work — offered here so that you can stay informed between engagements.
FEATURED
The privacy obligation lawyers didn’t see coming
AML/CTF Tranche 2 reform has generated significant attention across the legal profession. What has received far less focus is the privacy consequence that arrives with it. For many law practices, 1 July 2026 does not just mark the start of anti-money laundering obligations, it marks the first time the Privacy Act 1988 (Cth) has ever applied to their practice.
Generative AI and the Australian practitioner: an update on court expectations, professional risk and what your firm needs to do
Twelve months ago, Australian lawyers were asking whether they needed an AI policy. That question has been clearly answered. On 16 April 2026, Chief Justice Mortimer issued the Federal Court’s General Practice Note on Generative AI (GPN-AI), applying to everyone in proceedings: lawyers, litigants, witnesses and third parties. The NSW Supreme Court’s Practice Note SC Gen 23 has been in force since 3 February 2025. The Supreme Court of Victoria has issued its own Guidelines for Responsible Use of Artificial Intelligence in Litigation.
Major reforms reshape Australia's digital legal landscape
As Australia heads into 2025, sweeping reforms are transforming our digital landscape. The landmark Cyber Security Act 2024, alongside major privacy and Digital ID reforms, signals a significant overhaul of Australia's digital regulations. From mandatory ransomware payments reporting to enhanced privacy protections and a new Digital ID framework, these changes set clear expectations for how organisations handle cyber threats and personal information. With implementation deadlines approaching, businesses and government agencies face crucial decisions about compliance and digital security. Discover how these reforms will reshape Australia's digital future and what your organisation needs to know to prepare for the changes ahead.
Privacy Awareness Week (6-12 May, 2024) - changes to the Privacy Act that could impact your organisation
To mark Privacy Awareness Week from 6 to 12 May 2024, we’re sharing Privacy Act updates with important legal changes that may impact your organisation.
Our submission to the Parliamentary Joint Committee on Law Enforcement into Cybercrime
In October 2023 Law & Cyber was invited by the Parliamentary Joint Committee on Law Enforcement to file a submission on the capability of law enforcement to respond to cybercrime.
Our resources may be accessed for non-commercial or personal use only. No part of this website or its content — including publications — may be copied, used, adapted, published or distributed without the prior written approval of Law & Cyber. For details see our Website Terms of Use.
AML/CTF Tranche 2 reform has generated significant attention across the legal profession. What has received far less focus is the privacy consequence that arrives with it. For many law practices, 1 July 2026 does not just mark the start of anti-money laundering obligations, it marks the first time the Privacy Act 1988 (Cth) has ever applied to their practice.