We treat your information in confidence. We recognise that you will have concerns about a range of issues relating to the use and sharing of your information. We will always engage with you before we share any information with other stakeholders. We will only do so for the purposes of responding to the incident and managing the consequences of the incident.

Part 4 of the Cyber Security Act 2024 (the Act) establishes a Limited Use obligation that restricts how the National Cyber Security Coordinator and the National Office of Cyber Security (NOCS) can record, use or disclose information that entities voluntarily provide under Part 4 of the Act.

The objective of the Limited Use obligation is to provide confidence to engage early and share information freely, as there are restrictions on using and disclosing information provided under Limited Use for civil or regulatory purposes.

Protections enshrined under the legislation ensure this information is held securely when provided to the National Cyber Security Coordinator and the NOCS, as well as when this information is on shared for permitted purposes.

For more information see Limited Use for the National Cyber Security Coordinator (430KB PDF).