Legislation passed in 2021 addresses the cyber security of critical infrastructure and introduces a notification scheme for ransomware attacks, while in 2022 we may see legislative changes to the Corporations Act and Privacy Act.