Department of Home Affairs releases Cyber Security Discussion Paper for Public Consultation
On 13 July 2021, the Department of Home Affairs published a discussion paper entitled Strengthening Australia’s cyber security regulations and incentives, which focuses on regulatory reforms and voluntary incentives to strengthen the cyber security of Australia’s digital economy.
The paper is in response to recommendations made in the 2020 Cyber Security Strategy Industry Advisory Panel and seeks public views about approaches and initiatives proposed.
Three key areas of focus are highlighted:
- Setting clear cyber security expectations, which include:
- greater use of cyber security governance standards targeted at large businesses and company boards, potentially including greater liability for directors;
- minimum enforceable security standards to protect personal information; and
- mandatory baseline standards to improve the security of smart devices given the limitations of the voluntary IoT Code of Practice currently in place;
- Increasing transparency and disclosure, which includes:
- initiatives on cyber security labelling for smart devices to allow consumers to better identify the level of security implemented on, and testing passed by, a device;
- responsible disclosure policies to facilitate faster and more efficient detection and patching of vulnerabilities; and
- a small business cyber health check system that incentivises participation with a completion reward that can be used to market adequate cyber risk management;
- Protecting consumer rights via direct legal remedies for consumers, which include:
- reforming the Australian Consumer Law to address impediments to incidents involving cover cyber security; and
- introducing a direct right of action for privacy breaches under the Privacy Act.
The proposed cybersecurity policies are intended to uplift the cyber security of all digitally enabled businesses, and form part of Australia’s Cyber Security Strategy 2020. These reforms are an attempt for the Government to achieve its goal of being a leading digital economy by 2030.
The discussion paper stated that “cyber security is a shared responsibility between governments, businesses and the community”. As a result, “the government is taking action to mitigate the real and present danger than cybercrime presents to Australians and our economy”, said Home Affairs Minister Karen Andrews. “I want to make sure Australian businesses – big and small – are secure and consumers are protected.” She also declared that the country “cannot allow this criminal activity to become a significant handbrake on our economic growth and digital security.”
A number of the initiatives if implemented will have significant implications on many businesses and directors. We will be publishing a follow-up limelight with our more detailed analysis of key proposed initiatives. To stay updated, please share and follow the author on LinkedIn.
If you have any concerns about any of the proposed initiatives or about your cyber resilience, we can assist with a range of services and expertise.
To read the full discussion paper, click here. Submissions on the consultation paper must be made by Friday, 27 August 2021. Further details about can be found here.
This publication constitutes a summary of the information of the subject matter covered. This information is not intended to be nor should it be relied upon as legal or any other type of professional advice. For further information in relation to this subject matter please contact the author.
Level 4, 41 Currie Street
Adelaide SA 5000
+61 8 8215 7000
Level 4, 157 Ann Street
Brisbane QLD 4000
+61 7 3157 1900
Level 22, 114 William Street
Melbourne VIC 3000
+61 3 9611 8800
Level 8, 221 St Georges Terrace
Perth WA 6000
+61 8 9476 3800
Level 24, 6 O’Connell Street
Sydney NSW 2000
+61 2 8240 8000