Business & Commercial
A cyber incident can create legal questions about personal information, contracts, insurance, evidence and regulatory reporting alongside the technical response. The information affected, organisation involved and facts known so far shape the assessment.
General information only — not legal advice. This Australian overview is not a statement of every state or territory’s law. Check the jurisdiction and current requirements with an appropriately qualified adviser.
Technical containment and legal notification assessment are different tasks that need coordination. Not every incident has identical reporting obligations. Engage appropriate responders promptly, preserve relevant records and ask who is responsible for assessing duties and communications as facts develop.
Organise the following material you already lawfully hold. This is a preparation list, not a complete evidentiary requirement. Ask the verified adviser what they need and how to send it securely.
Keep originals and dates intact. Use a short initial enquiry for a conflict and suitability check before sending sensitive documents.
Who is coordinating technical response, legal assessment and any required notification?
Ask the adviser to explain the assumptions behind the answer, any missing information and what would change the proposed next step. You can request an initial assessment without assuming that full representation is included.
Use the topic-specific question above to agree on the purpose of the meeting. Ask whether the appointment includes document review, advice on options, a written summary or any further action. Confirm responsibility for dates and lodgement rather than assuming an enquiry transfers that responsibility.
Compare the defined work and exclusions, not just the initial price. Ask about GST, third-party expenses, later stages and what happens if the scope changes. Our legal fees guide explains useful questions, and the comparison worksheet helps record proposals.
Explain what happened and the outcome you want in ordinary language. Mention related decisions, notices and existing proceedings. The adviser can assess the appropriate scope and whether a referral is needed. Explore the Business & Commercial category for connected issues.
Mention connected issues when you enquire. One engagement may not cover every part of your situation.
Use these primary resources for background and current pathways. A state-specific resource is an example for that jurisdiction, not a rule for all Australia. Broad regulator and tribunal links do not establish your eligibility or a legal entitlement.
Federal data-breach scheme; not every incident or organisation has identical duties.
Federal privacy framework; coverage and state obligations need separate assessment.
Our document lists, questions and examples are original editorial preparation prompts. Follow the relevant authority for current requirements and seek individual advice before acting.
Explore all legal categories → · Lawyer selection and consultation guides → · Legal glossary →
book a lawyer