Envision Legal
← More consultations

Proposed amendments to streamline and modernise the Security of Critical Infrastructure Act 2018

Approx. 1 July 2026MediumConsultations

The development

The Department of Home Affairs consulted on proposed amendments to streamline and modernise the Security of Critical Infrastructure Act 2018, following the Independent Review into the Act delivered by Dr Jill Slay AM on 31 January 2026. The review found that the Act has established a strong foundation for protecting Australia's critical infrastructure, strengthened national security and resilience, and improved partnerships between government and industry, while also finding that the legislative framework needs ongoing refinement as the threat environment evolves, including growing system interconnection and the emergence of new nationally significant sectors and technologies.

In response, the Department released a consultation paper, Streamlining and modernising the Security of Critical Infrastructure Act 2018, setting out a second tranche of proposed reforms. The proposed amendments would aim to reduce unnecessary complexity and regulatory duplication, modernise and refine the sectors and assets covered by the Act, clarify legislative expectations, assurance mechanisms and governance arrangements, and improve the ability to assess whether security and resilience outcomes are actually being achieved.

The Department held three public virtual town hall sessions during the consultation period, on 6 July, 14 July and 21 July 2026, along with an impact analysis session, to explain the proposals and answer questions. The consultation period has now closed, and the Department has said it will publish submissions on its website unless requested otherwise, subject to redaction of commercially sensitive or protected information. No final legislative amendments have yet been introduced, and the specific sectors or assets that may be added or removed from coverage have not been confirmed.

The briefing

Regulator or source
Home Affairs
Type
Consultation
Subject matter
Privacy, data & AI
Jurisdiction
Cth
Published
Approx. 1 July 2026
Submissions close
No deadline
Reference
Not applicable
Priority
Medium

What it means for business

Entities currently captured as responsible entities under the Security of Critical Infrastructure Act, or operating in sectors that may newly fall within scope, may wish to monitor the outcome of this consultation to understand how asset and sector coverage, governance requirements and assurance obligations might change. Businesses that made submissions during the consultation period may want to review the published submissions once available to understand the range of industry positions put to the Department ahead of any legislative amendments being introduced.

Entry last reviewed 9 October 2026.

What does this mean for your business?

If this development touches your contracts, compliance or reporting, it may be worth a short conversation. Get in touch through our contact page and a senior lawyer will reply within one business day.

Request a fixed-fee scope

Regulatory alerts

Get the radar in your inbox.

A short email when something worth knowing lands. Pick the areas you care about and skip the rest.

Areas of interest

By subscribing you consent to receive these updates. Your address is used only for this purpose and you can unsubscribe at any time. See our privacy policy.

This register contains general information only and does not constitute legal advice. Envision Legal accepts no liability for any loss arising from reliance on this content. You should seek independent legal advice tailored to your specific circumstances. For enquiries, contact Envision Legal.

Send a briefFixed-fee quote