Do companies require a cybersecurity risk management plan, under Australian law?

Recent case of ASIC v RI Advice Group Pty Ltd serves as a warning that companies which do not have adequate cybersecurity risk management plans, systems and controls in place are at risk of contravention of the Corporations Law and the Privacy Act which can result in substantial pecuniary penalties. Practical steps can be taken by companies and their directors to reduce these risks.

Read more

Privacy and Risk Management: Information Sheet 3 – updated 10 August 2021

Risk Management: Data Protection and Privacy Compliance Privacy compliance and data breach risk management is too often not taken seriously by Australian organisations. The complexity of organisational structures and IT business systems in many instances results in management not knowing what data is collected by whole of business and how the data is managed and… Read More

Read more

OAIC Releases its Latest Report on Notifiable Data Breaches – Privacy Risk Management – Update – September 2020

The Office of the Australian Information Commissioner (OAIC) has published its Notifiable Data Breaches Report for the period 1 January to 30 June 2020. Stephens Lawyers & Consultants’ Privacy Risk Management: Data Protection and Privacy Compliance Information Sheet provides an update and summary of some key findings and statistics in this Report. Whilst there is no single solution for the protection of privacy data, there are steps which organisations can take to minimise the risk and harm of privacy data breaches.

Read more