More than three years after the Cybersecurity Law came into force, Vietnam's Government has finally issued guidance for its implementation under Decree No. 53/2022/ND-CP. In this Insight we examine this requirement and its implications for Vietnamese and foreign businesses. ...

Software is increasingly being used as a medical device and in medical devices. It is crucial that businesses understand the regulations that can apply to software-based medical devices, the IP considerations if they wish to protect such devices and the privacy-related risks associated with the collection and use of data from such devices. This Insight explores each of these issues in turn. ...

The recently released consultation paper on Queensland's privacy and right to information framework outlines significant proposed reforms. This Insight explains the key suggested changes and their potential impacts. ...

Suppliers and service providers are a critical input into an organisation's ESG footprint, with supply chain contracts offering a key opportunity for businesses to realise their ESG goals. We provide our top tips on how businesses can optimise their supply chain contracts to meet ESG objectives. ...

The Federal Court handed down its judgment in proceedings brought by ASIC against RI Advice on 5 May 20221. It found that, as result of its failure to manage cyber security risks and cyber resilience, RI Advice breached its obligations to do all things necessary to ensure that the financial services covered by the licence were provided efficiently and fairly, and to have adequate risk management systems in place. ...

Organisations today are both blessed and cursed with extraordinary amounts of data. The responsibility for information security and data governance starts and ends with the board and senior management. We offer a handbook to help navigate duties and liabilities and a checklist of questions directors should be asking. ...

The final anticipated amendments to the Security of Critical Infrastructure Act 2018 (Cth) (SOCI Act) have been passed in the nick of time, making their way through the Senate in its last sitting before the 2022 Federal Election. These latest amendments introduce new and enhanced obligations for risk management programs and security respectively, and the concept of ‘systems of national significance’. ...

The Department of the Prime Minister and Cabinet is inviting responses to its recently released issues paper (Issues Paper) to inform future digital economy regulation in the areas of automated decision making (ADM) and artificial intelligence (AI). ...

A full bench of the Federal Court has confirmed an earlier ruling that there was a prima facie case Facebook Inc (now Meta Platforms Inc) 'carries on a business' and collects personal information in Australia. With this decision, the Australian Information Commissioner can now proceed with the landmark case against Facebook Inc and Facebook Ireland Ltd in relation to a number of alleged breaches of the Australian Privacy Principles. ...

Cybercrime continued to dominate headlines throughout 2021, with the global cost of cybercrime predicted to reach $10.5 trillion annually by 2025 . As governments continue to navigate how to best deter cyber criminals, organisations must remain vigilant in the face of increasingly sophisticated cybersecurity attacks – arising from within and outside their organisation. We look at the top five cybersecurity trends that defined 2021 and what they mean for Australian businesses in 2022 ...