Cyber Security, Privacy, and Data

Managing enterprise and reputational risk in relation to personal information, digital assets, and corporate data is an increasingly complex challenge with ongoing digitisation, the rise of artificial intelligence (AI), regular regulatory change, and an evolving threat landscape.

As a result of relentless technological advances, including AI-driven innovations, ubiquitous digitisation, increasing cyber threats, and increasing regulatory complexity, having experienced counsel to guide your business through the privacy, AI and cyber landscapes is more important than ever.

Our data protection and cyber security team includes specialists across our IT and privacy, corporate crime and investigations, employment, insurance and risk, litigation and dispute resolution, intellectual property, and corporate practices.

We assist organisations in all sectors, with expertise and experience across the full spectrum of cyber security, privacy, and data risk management, including:

• transactional – structuring, drafting, and negotiating data-centric transactions including those involving AI-driven technologies;
• policy – preparing and implementing internal policy documents and data management frameworks, including staff training on cybersecurity and AI usage;
• risk and governance – planning and prevention, including preparing risk analysis frameworks and advising on directors’ duties and corporate governance obligations;
• advisory – advising on the use of AI, data protection and regulatory compliance, including under State, Territory, and Commonwealth privacy legislation and Australian Consumer Law;
• incident response – handing all aspects of cyber incident response, including assessment, reporting, and engagement of forensic consultancy experts;
• insurance – development and placement of cyber risk insurance via Allegiant IRS;
• litigation and dispute resolution – strategic guidance on litigation strategy and defence of claims involving cyber, data, and AI-related disputes; and
• national security – advising on application of Security of Critical Infrastructure Act 2018 (Cth) (SOCI), including registration, notification, and cooperation obligations.

We regularly advise overseas entities in relation to their Australian privacy and data management obligations and assist to implement practical measures to address those obligations. We are familiar with the challenge of ‘translating’ between Australian and overseas regimes, and are experienced in finding practical solutions to best-fit the requirements of multiple jurisdictions including those impacted by AI regulations.

Experience