Mandatory Ransomware Payment Reporting laws

|

Cyber

What is
Mandatory Ransomware Payment Reporting laws
Australia's world-first mandatory ransomware payment reporting laws, enacted under the Cyber Security Act 2024, requires businesses with an annual turnover exceeding AUD$3 million and critical infrastructure operators to report ransomware payments within 72 hours.
Mandatory Ransomware Payment Reporting laws
in more detail

The Cyber Security Act 2024 (Cth) commenced on 20 May 2025 and requires entities to report ransomware payments to the Australian Signals Directorate within 72 hours of making a payment. This applies to operators of critical infrastructure and businesses with annual turnover exceeding $3 million. Non-compliance may attract penalties for non-compliance.

RELATED TERM

ALL CATEGORY