cybersecurity rules for smart devices

New laws tighten cybersecurity rules for smart devices

Under new laws, all smart devices, including watches, fridges, and televisions, must meet minimum cybersecurity standards to better protect Australians and businesses.

The regulations will also require certain businesses to report if they pay a ransom to hackers. Additionally, the Government will create an expert panel to review significant or unusual cybersecurity breaches, providing oversight of risks and identifying potential patterns in attacks.

Home Affairs and Cybersecurity Minister Tony Burke is set to introduce the nation’s first standalone cybersecurity act to Parliament on Wednesday. The goal of this new legislation is to strengthen security measures and protect critical infrastructure more effectively. Burke emphasized that this step was long overdue.

“Australians enjoy the convenience of smart devices, but it’s important for consumers to trust that these devices are safe,” Burke said.

cybersecurity rules for smart devices
Tony Burke – Home Affairs and Cybersecurity Minister – Image CRE from theaustralian.com.au

This legislation ensures we stay ahead of emerging threats, helping individuals and businesses better respond to and recover from cybersecurity risks.

The minister explained that businesses were extensively consulted in drafting these laws. While the Government is leading the charge on cybersecurity, it cannot act alone. “To make Australia a global leader in cybersecurity by 2030, we need the collective effort of government, industry, and the community,” Burke added.

The legislation will also grant the Government the authority to direct operators of critical infrastructure—across sectors such as communications, financial markets, defense, groceries, transport, and utilities like power and water—to address significant shortcomings in their risk management programs. This could involve ordering companies to provide information or directing specific actions during serious incidents.

In 2023 alone, Australians reported nearly 94,000 cybersecurity threats—an average of one every six minutes. The Australian Signals Directorate responded to over 1,100 of these incidents. Recent high-profile breaches at Optus, Medicare, and even parliamentary networks have underscored the need for stronger cybersecurity protections.

For more information on how new regulations are shaping the future of tech security, check out our detailed guide on cybersecurity rules for smart devices