Cyber reforms: The Cyber Legislative Package 2024

On 9 October 2024, the Australian Government introduced the Cyber Security Legislative Package 2024 into Parliament as part of reforms to strengthen Australia's national cyber defences.

The proposed legislative reforms will implement seven key initiatives set out in the 2023-2030 Australian Cyber Security Strategy. The Legislative Package consists of:

  • the Cyber Security Bill 2024 (Cth);
  • the Intelligence Services and Other Legislation Amendment (Cyber Security) Bill 2024 (Cth); and
  • the Security of Critical Infrastructure and Other Legislation Amendment (Enhanced Response and Prevention) Bill 2024 (Cth).

The Cyber Security Legislative Package has been referred to the Parliamentary Joint Committee on Intelligence and Security for inquiry and report.

View our summaries of each element of the legislative package below.

Drawing of documents
Cyber Security Bill 2024: Australia's first whole-of-economy cyber security law revealed

The Cyber Security Bill 2024 provides a legislative framework to help address broad, whole-of-economy cyber security issues and better position the government as it responds to new and emerging cyber security threats.

Two programmers or coworkers at an office desk working on a desktop computer.
Intelligence Services and Other Legislation Amendment (Cyber Security) Bill 2024: Furthering the limited use obligation

The Intelligence Services and Other Legislation Amendment (Cyber Security) Bill 2024 (Cth) amends the Intelligence Services Act 2001 (Cth) to impose a "limited use" obligation to protect the information voluntarily provided by an entity to, or acquired or prepared by, the Australian Signals Directorate during an impacted entity's engagement in relation to a cyber security incident.

Two women standing in a data centre or communications room
Security of Critical Infrastructure and Other Legislation Amendment (Enhanced Response and Prevention) Bill 2024: Strengthening critical infrastructure legislation

The Security of Critical Infrastructure and Other Legislation Amendment (Enhanced Response and Prevention) Bill 2024 (Cth) will amend the Security of Critical Infrastructure Act 2018 (Cth) to give effect to the legislative reforms outlined under Shield 4 of the 2023-2030 Australian Cyber Security Strategy.

A man working at a digital console.