On 17 February 2023, the Security of Critical Infrastructure (Critical infrastructure risk management program) Rules (CIRMP Rules) were registered under the SOCI Act and set out mandatory requirements for responsible entities.
On 22 November 2023, the Australian Government released the 2023-2030 Australian Cyber Security Strategy (the Strategy). The goal of the strategy is for Australia to become a world leader in cyber security by 2030, and to build stronger cyber defences to enable our citizens and businesses to prosper, and to build cyber resilience so we can …
Read more
In the landscape of Australian Business, government and not-for-profit, the strategic management of data has become increasingly vital. However, as we see time and time again in data breaches, data can also pose a significant risk to organisations if not properly managed.
The Digital ID Bill passed Federal Parliament in May and will come into force in November 2024. Overall, the legislation aims to give Australians secure and effective ways in which to verify their identify for use in online transactions with government and business.
Ransomware attacks present an escalating threat to global security, one which threatens a broad range of organisations ranging from government agencies to small businesses. Driven by an increasingly interconnected IoT landscape and the use of outdated or legacy systems, ransomware poses a growing threat to Australia’s critical infrastructure – including the healthcare, financial services, transportation, …
Read more
General protections from unlawful discrimination under the Fair Work Act 2009 (Cth) apply to both employees and prospective employees. It is important to ensure that reliance on tools such as AI in recruitment processes do not infringe on the protections from discrimination that are afforded to prospective employees. The list of attributes that are protected …
Read more
Griffin Legal endorses a ‘privacy-by-design’ approach, where organisations proactively embed good privacy practices into the design and development of a program that involves any collection, use, or disclosure of personal information. Every decision and new process must be approached via a privacy-first mindset, promoting both functionality and privacy protection.
Cyber incidents are increasing in frequency across all sectors including charities and not-for-profits. As a result, the Australian Signals Directorate’s Australian Cyber Security Centre is encouraging charities and not-for-profit organisations to protect their information and systems. The steps that these organisations can take are the same steps that all types of organisations can take – …
Read more
The Office of the Australian Information Commissioner’s (OAIC) recently released its latest notifiable data breaches report for July to December 2023, highlighting the continued risks of data breaches faced by organisations and third-parties. This is underscored by the notable increase in the volume of reported data breaches, increasing 19% since the previous reporting period.