Policy
Browse all policy articles on Digital Blog

Australia names Cyber Incident Review Board to formalise post-breach lessons
The federal government has named Telstra's Narelle Devine to chair a new Cyber Incident Review Board, formalising no-fault post-mortems of major attacks under the Cyber Security Act 2024. Six other members were appointed from NBN Co, Boeing, Allens, Toll, SA Power Networks and UNSW.

ShinyHunters breach of Canvas LMS hits Australian schools and universities
Australian universities, state education departments and private schools are among the customers caught up in a global breach of Instructure's Canvas platform. ShinyHunters claims to have taken 3.65 terabytes of data covering 275 million users.

Australian startups warn CGT overhaul could blunt R&D tax incentive boost
Australian startup founders and tax advisers say proposed cuts to the 50 per cent capital gains tax discount risk undercutting an expected lift to the R&D Tax Incentive cap, days before Treasurer Jim Chalmers hands down the 12 May 2026 federal budget.

APRA warns mortgage brokers on AI risk as CBA scales fraud-detection agent
APRA has told lenders and brokers AI-driven fraud is a board-level prudential risk, after Commonwealth Bank scaled an in-house fraud-detection agent and industry mortgage fraud hit about $A3 billion.

ASIC fines Canva $792,000 over late accounts as filings show $US242m loss
ASIC has fined Canva Group A$792,000 over the late lodgement of its 2024 accounts, with each of four entities paying A$198,000. The long-delayed filings show the Sydney design software company posted a US$242 million net loss on revenue of US$2.1 billion.

ASIC sets June deadline for crypto exchanges as digital asset law nears commencement
ASIC has given Australian crypto exchanges until 30 June 2026 to begin licensing under existing financial services rules, ahead of the Corporations Amendment (Digital Assets Framework) Act 2026 commencing on 9 April 2027.