Client portal
It's time to put cyber security at the heart of ESG
Technology and digitalisation have transformed society and the way we do business, dramatically improving efficiency, quality, productivity and ultimately value. However, with these benefits come new challenges posed by escalating and rapidly changing cyber security and digital risks.
Robert Neely
Consultant
Related expertise: Blockchain and digital assets , Intellectual property , International, Regulatory and compliance, Technology and digital, Competition and consumer law
Lander & Rogers welcomes new TMT partner
Leading contemporary law firm Lander & Rogers has today welcomed partner Lisa Fitzgerald to its corporate group. Lisa brings further strength to the firm's Technology and Digital practice, advising clients on digital transformation, procurement, technology infrastructure and data security.
Privacy compliance: introducing the Privacy Policy Rapid Review Service
This new service from Lander & Rogers' Digital Economy experts will ensure your organisation stays compliant with Australia's new privacy laws.
NSW takes governance-first approach to facial recognition technology in hotels and clubs
The NSW Government has committed to mandating the use of facial recognition technology to support the operation of a state-wide gambling exclusion register in the state's hotels and clubs.
ACCC cracks down on misleading conduct in the digital economy
The ACCC has launched a string of high-profile proceedings against major online platforms in a crackdown on misleading and deceptive conduct in the digital economy.
Guide to crypto assets in Australia
Robert Neely and Mark Lindfield provide a snapshot of the legal status of crypto assets in Australia, in this guide for Terralex.
Lander & Rogers announces selected startups for 2024 AI-focused LawTech Hub
Lander & Rogers has welcomed its seventh cohort to its globally celebrated LawTech Hub.
Privacy and working from home - five steps your organisation should be taking to minimise risk
It is notable that so many businesses have been able to move relatively seamlessly to a remote working model in the wake of COVID-19. However, this rapid and unexpected shift presents some obvious cybersecurity and privacy risks, particularly where organisations are new to remote working.
Reminder to register .au direct domain names
In March 2022, new rules were introduced to allow anyone with an Australian presence to register a new category of domain name, known as '.au', which will operate in addition to the existing '.com.au' and '.net.au' domains.
Uber decision a stark reminder of the extraterritorial reach of the Privacy Act 1988 (Cth)
The Office of the Australian Information Commissioner's decision on 30 June 2021 that two non-Australian entities, Uber Technologies, Inc. and Uber B.V. (together, the Uber Companies), breached the Privacy Act 1988 (Cth) following a data breach in October/November 2016 is a timely and stark reminder of the extraterritorial reach of the Privacy Act.
SOCI Act 2026 reforms: what managed service providers and IT contractors need to know about proposed "Relevant Operator" obligations
The proposed 2026 reforms to the SOCI Act could significantly expand cyber security obligations beyond critical infrastructure owners to managed service providers, IT contractors and other suppliers with practical operational control. Organisations supporting critical infrastructure should assess whether they could be captured as a new 'relevant operator' and consider making a submission before consultation closes on 31 July 2026.
Lander & Rogers supports Privacy Awareness Week 2023
Lander & Rogers is proud to support Privacy Awareness Week (PAW) 2023 to promote privacy best practice, protect the privacy of individuals and to support businesses to be reform-ready for the most wide-reaching privacy law changes in Australia's history.
Financial Times innovation awards recognise Lander & Rogers in two categories
UK business publication The Financial Times has revealed the finalists in its prestigious Innovative Lawyers Asia Pacific 2022 awards, with Lander & Rogers shortlisted in two categories.
Google fined $60 million for misleading data practices
The Federal Court has ordered Google to pay $60 million in penalties for making misleading representations to consumers about the collection and use of their personal location data on Android phones.
Privacy pandemic? The ACCC now takes an interest in privacy
Privacy just went viral. If you thought privacy was only under the watch of the Office of the Australian Information Commissioner (OAIC) and the Privacy Act 1988 (Cth), you would be wrong.
Lander & Rogers announces industry partnership with education sector to drive legal-tech innovation
Lander & Rogers has announced a new partnership with Monash University and student-run organisation BotL. to empower and upskill emerging legal professionals and further enhance the firm's capabilities through legal-tech innovation.
Lander & Rogers supports Privacy Awareness Week 2026
As Australian businesses gear up for significant privacy reforms, Lander & Rogers is proud to support Privacy Awareness Week 2026.
Australian federal privacy reform update
Concern in Australia about the power of the major digital media platforms has acted as a catalyst for a full review of Australian privacy law.
Misuse of funds: Regulating crypto custody after the FTX fallout
The Australian Government has indicated its intention to introduce legislation regulating the custody and exchange of digital assets.
Keeping technology 'human centred'
Our Sydney office recently hosted the Women Lawyers Association of NSW Law & Technology panel discussion. At this event, a panel of experts discussed the concept of keeping technology 'human centred' both in its application to the provision of legal services and in the administration of the law. The panelists covered the pros and cons of automation in the law, including the use of AI, and how technology can be used to enhance relationships between legal providers and clients.
'Doing Business in Australia': Lessons Learned from Facebook Inc v Australian Information Commissioner
Facebook continues to face regulatory scrutiny from the Australian Information Commissioner, which has successfully sought leave to serve legal proceedings on the social media giant.
Cricket Australia shares insights into its impending NFT launch with Lander & Rogers and the firm's clients
Lander & Rogers' people, clients and industry partners recently gained insight into how one of Australia's biggest sporting bodies is looking to the future by launching into the metaverse.
When privacy meets AML/CTF: What tranche 2 reporting entities need to know
From 1 July 2026, new obligations will commence for entities that were previously not subject to the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).
SOCI Act update: Grace period for CIRMP Rules compliance ends soon
From 17 August 2023, responsible entities will be required to have a written CIRMP in place or run the risk of contravening the CIRMP Rules and the SOCI Act.
Data strategy and directors' duties: key considerations for boards
While there is growing appreciation of the need to consider privacy and the risks associated with collecting and using personal information, data strategies often fail to consider an organisation's broader legal obligations, which play a vital role in effective data strategy design and execution.
SOCI Act 2026 reforms: what responsible entities for critical infrastructure assets need to know
The proposed 2026 SOCI Act reforms would significantly strengthen governance, risk management and supply chain obligations for responsible entities. Organisations should prepare for enhanced CIRMP requirements, increased board oversight, new obligations to manage third-party operators, and higher civil penalties if the reforms proceed.
Insights from the Information Commissioner's investigations into Uber, 7-Eleven and Clearview AI
In 2021, the Office of the Australian Information Commissioner released three determinations in respect of its investigations into the privacy practices of Uber, 7-Eleven and Clearview AI.
Australian privacy law reform update: Privacy Act review
The Australian Government's commitment to privacy law reform in Australia continues, taking another step forward along the privacy law reform path.
Cyber security year in review: Notable cyber attacks in 2021
2021 saw many organisations exposed as vulnerable to a growing number and range of cyber threats.
Cyber security in Australia: Passed and pending legislation and changes on the horizon
On 23 June 2021, the Online Safety Act 2021 (Cth) was passed by Parliament and will commence on 23 January 2022. The Act builds upon the existing online regulatory framework established in the Enhancing Online Safety Act 2015 (EOSA) and creates additional compliance obligations.
Security of Critical Infrastructure and Other Legislation Amendment (Enhanced Response and Prevention) Bill 2024: Strengthening critical infrastructure legislation
The Security of Critical Infrastructure and Other Legislation Amendment (Enhanced Response and Prevention) Bill 2024 (Cth) will amend the Security of Critical Infrastructure Act 2018 (Cth).
Australian privacy law reform update: Online Privacy Bill
The Online Privacy Bill is intended to give effect to the Australian Government's commitment to strengthen the Privacy Act 1988 (Cth).
Three significant areas of reform proposed in Privacy Act Review
On 16 February 2023 the Attorney-General's Department published the Privacy Act Review: Report 2022, which included three significant areas for reform.
Enhanced critical infrastructure risk management program rules 2026: what responsible entities need to know
The Enhanced Critical Infrastructure Risk Management Program (CIRMP) Rules 2026 introduce significantly stronger cyber security, governance and supply chain obligations for responsible entities across Australia's critical infrastructure sectors. While the new requirements are subject to grace periods through to June 2028, organisations should begin assessing their existing CIRMPs and planning compliance now.
What's next for cryptocurrency regulation in Australia in 2023?
The Australian Government has indicated that it intends to introduce legislation to improve regulatory frameworks around cryptocurrency in 2023.
Australian Privacy Law Update - What APP entities need to know in 2026
On 10 December 2026, automated decision-making transparency obligations under the Privacy Act 1988 (Cth) (Privacy Act) will come into effect.
Case study: Facebook subsidiaries fined $20 million for misleading consumers
On 26 July 2023 the Federal Court ordered two Facebook subsidiaries, Facebook Israel Ltd and Onavo Inc to each pay a pecuniary penalty of $10 million for engaging in misleading conduct in breach of the Australian Consumer Law.
What the proposed Children's Online Privacy Code means for your organisation
Child privacy laws in Australia are under review, with the Australian Information Commissioner releasing the Exposure Draft of the Privacy (Children’s Online Privacy) Code 2026 for public consultation.
Privacy reform update: First tranche of Privacy Act reforms revealed
The Attorney-General has introduced the highly anticipated amendments to the Privacy Act 1988 (Cth) to the Australian Federal Parliament.
Privacy milestone: $5.8million penalty - first civil penalty under Privacy Act
On 8 October 2025, the Federal Court issued the first civil penalty under the Privacy Act 1988 (Cth) (Privacy Act). The $5.8 million penalty represents a step-change in the enforcement of privacy obligations in Australia and demonstrates that organisations who contravene the Privacy Act may be subject to substantial financial penalties.
National AI Plan: Australia's roadmap to building an AI enabled economy
On 2 December 2025 the Australian Government released its National AI Plan (Plan). The Plan sets out the Australian Government's commitment and approach to fostering AI innovation, adoption and investment in Australia. This update provides a snapshot of the National AI Plan, its implications for AI regulation in Australia and the AI regulatory road ahead.
Proximity marketing: the privacy implications for retailers
The shopping experience has undergone significant changes over the last decade. These days almost everyone has a smart phone and online shopping is now common place. At a time when consumers are empowered with choice, with many ways to shop and a number of retailers to choose from, new technologies can help retailers stand out from the pack. Proximity marketing is one way to do this.
Cyber Security Bill 2024: Australia's first whole-of-economy cyber security law revealed
On 9 October 2024, the Australian Government introduced the Cyber Security Legislative Package 2024 into Parliament as part of reforms to strengthen Australia's national cyber defences.
Privacy Act in review
After two years of extensive consideration and consultation, the Commonwealth Attorney-General's Department released its much-anticipated report on the Privacy Act 1988 (Cth), published 16 February 2023.
Call for law reform to regulate facial recognition technology
The University of Technology Sydney is calling for a model law to regulate the development and deployment of facial recognition technology in Australia.
Cyber security in Australia: Policies, funding and initiatives for the digital economy
Policies, funding and initiatives to promote better cybersecurity and cyber resilience in Australia for the benefit of the digital economy.
Artificial intelligence: the impact on corporate legal services
The Information Age is witnessing a major shift brought about by advancements in artificial intelligence (AI). While the technology itself isn't new (albeit it's more advanced), what's unique is the availability of and access to AI like Open AI's ChatGPT, which has enormous potential for streamlining traditional legal service delivery models.
Privacy-enhancing technologies and their role in privacy compliance
What are privacy-enhancing technologies, and how are they relevant to Australian privacy law?
Privacy milestone: First tranche of privacy reforms passed
On 29 November 2024, the Senate passed the Privacy and Other Legislation Amendment Bill 2024 (Cth) (Bill) implementing a first tranche of recommendations from the Attorney-General’s Privacy Act Review Report of 16 February 2023.