No, the small business exemption is not ending in December
What commences on 10 December is automated decision-making transparency. For most clinics and firms the exemption was never theirs to lose, and the reason why is worth knowing.
Read more →IT & Cyber Security Insights
Real incidents, translated into what to actually do.
We don't try to cover every story from around the world. When something happens that's genuinely relevant to a Sydney clinic, firm or small business, we explain it in plain English and tell you the one thing worth checking in your own setup.
Windows 10 security updates double in price on 14 October
Year two of Extended Security Updates starts at twice the price, skipping a year costs more rather than less, and the free consumer option doesn't cover a business fleet.
Read more →Confirmation of Payee helps with invoice fraud. It doesn't close it
Your bank now name-checks the account before you pay. It's advisory only, it misses some payment types, and it can't tell you the invoice is fake.
Read more →Health, finance and legal top Australia's breach list
1,205 notifiable breaches in 2025, the highest since the scheme began. The sectors at the top aren't there because of their size.
Read more →You're collecting more ID than ever, and told to keep less of it
Tranche 2 made 100,000 law firms and accounting practices Privacy Act regulated on 1 July. Nobody's asking where all those licence scans ended up.
Read more →The small business exemption hasn't been removed. Parts of it have been carved out
The $3 million threshold is still law. What changed is that whole professions got pulled inside the Privacy Act regardless of turnover.
Read more →The "shared a file with you" email that spreads itself
It arrives from a real contact whose account is compromised, installs remote access, then emails itself to everyone in the address book.
Read more →Trust account fraud is targeting law firms
Email-based trust account fraud cost Australian businesses over $150 million last year. What Sydney law firms should check before it happens to them.
Read more →A small NSW accounting firm has been targeted by ransomware
A ransomware group has claimed an attack on a century-old accounting firm. What this means for accounting and advisory practices across Sydney.
Read more →A clinic's mailbox was compromised in April. Patients found out in July.
A Brisbane medical centre's email inbox was compromised by phishing, and patients weren't told for months. What this means for a Sydney practice.
Read more →One login, 13 million records: the real lesson from the Adobe breach
A reported breach shows what happens when one account can see more than any single job needs, and why small practices carry the same risk.
Read more →