The people behind Law & Cyber.

Simone Herbert-Lowe,
Principal & Founder

BA, LLB, MLM, MBA (Executive)

Simone Herbert-Lowe is one of Australia's leading specialists in cyber law, privacy and emerging technology. With more than 30 years of legal experience – including as Australian Practice Lead for the cyber practice of a global law firm – she founded Law & Cyber to give Australian businesses access to integrated, expert advice at the intersection of law, technology and cyber risk – a gap she saw clearly and set out to fill.

Simone advises businesses, professional associations, law firms and boards on the full spectrum of cyber-related legal issues: from Privacy Act compliance and data breach response to AI governance, technology law and the legal consequences of cyber incidents. Her practice is deliberately integrated — she understands not just the law, but the operational and regulatory context in which her clients are making decisions under pressure.

On privacy, Simone advises on compliance with the Privacy Act 1988 and the Privacy and Other Legislation Amendment Act 2024 — now in force — including the statutory tort for serious invasions of privacy, enhanced enforcement obligations, cybersecurity uplift requirements and the automated decision transparency provisions commencing December 2026. She also advises on the further Tranche 2 reforms being progressed by the Attorney General, the Notifiable Data Breaches scheme and privacy frameworks for organisations managing sensitive personal information. She also assists businesses newly designated under the AML/CTF Tranche 2 reforms — commencing 1 July 2026 — to manage the privacy and data compliance obligations that sit alongside their program requirements.

On AI, Simone advises on governance frameworks, acceptable use policies and the professional obligations now embedded in the Federal Court's GPN-AI practice note and the NSW Supreme Court's SC Gen 23 — areas of urgent and growing relevance for law firms and their clients alike.

Simone's research credentials are equally distinctive. In 2022 she presented a peer-reviewed paper at the IEEE International Symposium on Technology and Society, subsequently published in IEEE Xplore, arguing that Australian banks should implement name-matching verification for electronic funds transfers. Following publication, she was invited to give evidence to the Parliamentary Joint Committee on Law Enforcement into Cybercrime. In the period that followed, a key reform the paper had argued for was adopted — the banking sector's Scam-Safe Accord introducing Confirmation of Payee.

Simone has delivered expert written opinion in multi-million dollar Supreme Court proceedings, made submissions to the Parliamentary Joint Committee on Law Enforcement into Cybercrime, and educated more than 10,000 Australians about cyber risk through training programs distributed by major professional associations, insurers and industry bodies.

She is a regular speaker for Thomson Reuters, Relativity and national industry bodies, and has been featured in the Law Society of NSW Journal, Lawyers Weekly and other leading legal publications.