Mandatory Ransomware Payment Reporting laws
Australia's world-first mandatory ransomware payment reporting laws, enacted under the Cyber Security Act 2024, requires businesses with an annual turnover exceeding AUD$3 million and critical infrastructure operators to report ransomware payments within 72 hours.