I think I need to talk to a (cyber) lawyer: Two lawyers and a CISO decode Australia's new cybersecurity legal landscape

What a big 6 months for the law around cybersecurity and data in Australia.

There is a new Cybersecurity Act on the cards, long-awaited reforms to the Privacy Act and updates to the Security of Critical Infrastructure Act. A national Cyber Incident Review Board will be established to look into the 'big' incidents but won't find 'fault'. There will be limited use restrictions on how information provided to the ACSC can be accessed or used by other arms of government. Intended to encourage organisaitons to share more information with government, but many are asking if the 'limited use' is the same as 'immunity' from regulatory action following a cyber breach. Others are asking if it is now illegal to pay a ransom, and what the forecast ransom payment reporting obligations are all about? Don't forget the new security standards for IOT devices...

There have also been new actions in the courts relating to cybersecurity breaches in the form of class actions by impacted customers and shareholders as well as actions by regulators with potential fines exceeding $22 trillion.

But what does all of this mean for you and do you need a law degree to decipher it all? So many questions come to mind like “Do CISOs need to get insurance?” “Can you get privilege for an IR report?” and the old “should/can I pay a ransom?”

Join us for a panel discussion where a CISO of over 20 years, Ben Doyle, asks all the questions he would like answered from two of Australia's leading cybersecurity lawyers - Annie Haggar and Reece Corbett- Wilkins. We will also take questions from the audience.

Note, this presentation is no substitute for actual legal advice from a qualified lawyer skilled in cybersecurity. You should really get advice if you think you need it.