New Guidance Released For Australian Listed Companies On Continuous Disclosure Obligations During A Cyber Incident

Australia's corporate regulator, ASIC, has released new guidance on how to comply with market disclosure requirements when a listed company is in the middle of investigating and responding to a cyber incident.

The example appears in updated Guidance Note 8 Continuous Disclosure: Listing Rules 3.1 – 3.1B. It illustrates how existing ASX policy applies to a hypothetical data breach scenario, including commentary on the Listing Rule 3.1A exception, contents of the company's potential announcements, confidential engagement with relevant authorities, and trading halts/voluntary suspensions, in the context of the hypothetical scenario which unfolds throughout the example (much like the continuous developments and unfolding knowledge that occurs throughout a real data breach).