The Cyber Security Act and related bills have been passed by the Parliament, following review by the Parliamentary Joint Committee on Intelligence and Security. That Committee recommended a number of relatively minor changes, and with effect from six months after royal assent, once formal approval is granted by the Governor General, most businesses will be required to report ransomware payments.