Legislation Pending Review
Cyber Security Act 2024 (Cth) — No. 98, 2024
Metadata
- Type
- Legislation
- Source / Publisher
- —
- Current Edition
- —
- Verified Current
- —
- Next Verify Due
- —
Categories
security incident
Referenced Sections
Part 3 (ss.26–32 mandatory ransomware payment reporting within 72 hours to ASD via ReportCyber; s.26 reporting business entity threshold $3M turnover; s.27 reporting obligation; s.30 civil penalty 60 penalty units) Note: Part 3 in force 30/05/2025, full enforcement from 01/01/2026. Civil penalty for body corporate failure: 60 penalty units × 5 × $330 = $99,000.