Summary Following the recent Qantas data breach, which once again exposes our national cybersecurity vulnerabilities, we are met with press releases and performative outrage from prominent government officials. The breach reveals a fundamental issue that no amount of media statements or vague reassurances can hide. Despite the hype surrounding the Security of Critical Infrastructure (SOCI) Act 2018 and the revamped Privacy Act 1988, one might think Australia has established a strong, proactive, and preventative cybersecurity stance. Sadly, that belief is deeply mistaken. What is on Paper Does not Secure Systems. The latest updates to the SOCI Act (as of April 2025) and the Privacy Act (as of June ...