Australia's first standalone Cyber Security Act; in force late November 2024; ransomware-payment reporting (72 hours) from 30 May 2025; smart IoT device standards from March 2026.