What We Do

Cybersecurity Governance & Compliance – We advise on governance structures, policies, and frameworks that align with national and international cyber laws, privacy regulations, and industry standards (including ISO 27001 and NIST).

Data Breach & Incident Response – We guide organisations through urgent breach situations, managing legal risk, regulatory notifications, crisis communications, and post-incident investigations.

Privacy & Data Protection – Our lawyers provide expert advice on privacy compliance, cross-border data transfers, and the implications of emerging privacy legislation.

Regulatory Investigations & Disputes – We represent clients before regulators and in litigation arising from cybersecurity breaches or alleged non-compliance.

Cyber Risk in Transactions – We assess cyber risk exposure in mergers, acquisitions, and financing deals, ensuring our clients are protected from hidden vulnerabilities.

Recent Matters

• Assisted a major financial institution in responding to a large-scale phishing attack, including liaising with regulators and coordinating forensic investigations.

• Advised a healthcare provider on compliance with data breach notification obligations following a ransomware incident.

• Designed and implemented a cybersecurity governance framework for a global technology company expanding into the Australian market.

• Conducted cyber risk due diligence for a $120m acquisition in the retail sector.

• Represented an educational institution in proceedings related to unauthorised data access and privacy breaches.