Business & Commercial
A cyber incident can create legal questions about personal information, contracts, insurance, evidence and regulatory reporting alongside the technical response. The information affected, organisation involved and facts known so far shape the assessment.
General information only — not legal advice. This Australian overview is not a statement of every state or territory’s law. Check the jurisdiction and current requirements with an appropriately qualified adviser.
Technical containment and legal notification assessment are different tasks that need coordination. Not every incident has identical reporting obligations. Engage appropriate responders promptly, preserve relevant records and ask who is responsible for assessing duties and communications as facts develop.
Organise the following material you already lawfully hold. This is a preparation list, not a complete evidentiary requirement. Ask the verified adviser what they need and how to send it securely.
Keep originals and dates intact. Use a short initial enquiry for a conflict and suitability check before sending sensitive documents.
Give the adviser a factual incident timeline, systems and data believed affected, actions already taken and professionals involved. Distinguish confirmed facts from an investigation hypothesis. Ask who coordinates legal assessment, technical containment, insurer communication and any response to affected parties.
A technical fix does not necessarily resolve every legal question, and a legal consultation is not a substitute for incident-response expertise. Agree roles promptly rather than waiting for one professional to do everything.
Who is coordinating technical response, legal assessment and any required notification?
Ask the adviser to explain the assumptions behind the answer, any missing information and what would change the proposed next step. You can request an initial assessment without assuming that full representation is included.
Ask the incident team and adviser about preserving relevant records securely and lawfully. Keep a decision log and identify its source material. Do not delete or alter evidence simply to produce a cleaner account of the incident.
Compare the defined work and exclusions, not just the initial price. Ask about GST, third-party expenses, later stages and what happens if the scope changes. Our legal fees guide explains useful questions, and the comparison worksheet helps record proposals.
For a related legal task, read technology, privacy & data. Use both sets of preparation questions if your enquiry spans the two tasks.
Define the work before comparing the fee
Identify the business entity, the commercial objective and the stage of the transaction or disagreement. An owner’s personal position, a company’s interests and another participant’s interests may require separate advice.
Mention connected issues when you enquire. One engagement may not cover every part of your situation.
Use these primary resources for background and current pathways. A state-specific resource is an example for that jurisdiction, not a rule for all Australia. Broad regulator and tribunal links do not establish your eligibility or a legal entitlement.
Federal data-breach scheme; not every incident or organisation has identical duties.
Federal privacy framework; coverage and state obligations need separate assessment.
Our document lists, questions and examples are original editorial preparation prompts. Follow the relevant authority for current requirements and seek individual advice before acting.
See all areas of law → · Lawyer selection and consultation guides → · Legal glossary →
book a lawyer