Technology is not a sector defined by its tools. It is defined by capital at risk, regulatory exposure and the legal consequences of systems that fail, contracts that misallocate liability and frameworks that do not yet exist.
We advise ISPs, telcos, software companies, AI developers, government agencies, infrastructure operators and technology investors. Our clients operate systems that manage critical national infrastructure, patient records, airports, port logistics and public transport networks.
Areas of expertise
AI is operational. The legal questions it raises (liability for automated decisions, procurement risk, regulatory compliance, IP ownership and data use) are live matters, not prospective ones. Regulatory frameworks in Australia and around the world are being written now. Compliance obligations are determined now.
We advise on AI deployment contracts, automated decision-making transparency and liability, AI procurement for government and enterprise, and cross-jurisdictional regulatory compliance for AI products entering multiple markets. Where the law is unsettled, we determine the most defensible position and proceed from it.
Data centres, fibre networks, satellite systems and sovereign AI infrastructure involve large capital commitments, complex procurement, planning and construction risk, energy obligations, and in certain cases, national security considerations. The legal work spans the full lifecycle: from contract and financing through to regulatory compliance and operational risk.
We advise on telecommunications network deployment for large-scale property and infrastructure projects, data centre development, government technology infrastructure procurement and sovereign capability contracts.
The digital asset sector operates across regulatory frameworks that remain unresolved in most jurisdictions. Tokenisation, DeFi, blockchain-based payment systems and digital asset exchanges each present distinct legal questions (on product classification, licensing, liability structure, enforcement exposure and cross-border compliance) that are live now, not prospective.
Australia's regulatory framework for digital assets is being settled in real time. AFSL obligations, VASP licensing, AUSTRAC mandates and consumer protection requirements apply unevenly depending on how a product or platform is structured. Offshore, the position varies materially by market. Getting the structure wrong has regulatory, commercial and legal consequences that are difficult to unwind.
The sector's legal risk sits in classification, structure and enforcement (not in the underlying technology). We advise on digital asset transactions and token issuance, regulatory classification and licensing, smart contract enforceability, governance structures for DeFi and DAO platforms, AML/CTF compliance, and cross-jurisdictional frameworks for businesses operating across multiple markets. Where the regulatory position is contested, we determine the most defensible structure and proceed from it.
Technology procurement is where legal risk is allocated and fixed. Delivery timelines, IP ownership, acceptance criteria, liability caps, exit rights and data handling obligations determine the commercial outcome for both parties. Imprecision here is consequential.
We advise buyers and sellers on enterprise technology procurement, outsourcing agreements, managed services contracts, cloud and SaaS arrangements, and government technology contracts. We act for both domestic and international technology suppliers entering the Australian market and for large-scale government and enterprise buyers.
Platform and software transactions raise distinct questions about IP ownership, liability for service failure, data portability, exit rights and regulatory compliance in deployment markets. Multi-jurisdiction deployment adds further complexity. The terms agreed at contract stage determine the risk position for the life of the arrangement.
We advise on software licensing, SaaS subscription frameworks, platform commercialisation, open source compliance, API terms, development agreements and cross-border software supply contracts. Service levels, liability regimes, data rights, acceptance criteria and termination provisions are structured to align with commercial objectives and operational resilience requirements.
Telecommunications carriers, network operators and service providers operate in a heavily regulated environment. Licensing obligations, spectrum rights, access and interconnection requirements, consumer law compliance and industry code obligations are substantive legal matters with significant commercial consequences for non-compliance.
We advise carriers, infrastructure providers, satellite operators and service operators on regulatory compliance, licensing, industry code obligations and infrastructure deployment. Our experience in this sector spans decades of regulatory change.
Cyber incidents are a legal event. Regulatory notification obligations, contractual liability, insurance coverage, liability allocation and regulatory investigation are determined by what the contracts say, what the policies require and what the incident response plan does. Preparation is a legal function, not only a technical one.
We advise on cybersecurity frameworks, incident response protocols, regulatory notification obligations under Australian and international law, contractual risk allocation in technology agreements, data breach liability and cyber insurance coverage. We also advise on open source software security obligations and supply chain risk in technology contracts.
Data is a legal asset with specific obligations attached. Collection, retention, transfer, use and monetisation of data are all regulated activities. Cross-border data transfers, particularly involving health, financial and biometric data, require precise legal frameworks that address both domestic and international obligations.
We advise on privacy compliance, data governance frameworks, cross-border data transfer arrangements, regulatory exposure under Australian Privacy Act obligations, GDPR considerations for Australian companies operating in Europe, and HIPAA compliance for Australian companies entering the US health market.
Quantum computing, autonomous systems, biometric technologies and advanced surveillance systems present legal questions that existing frameworks do not fully resolve. The issues are not hypothetical. Liability allocation, regulatory classification, export controls, national security obligations and IP protection are current decisions for clients deploying or investing in these technologies.
We advise clients on the legal risk associated with frontier technology deployment, including regulatory mapping across relevant jurisdictions, IP structuring, procurement terms for early-stage technology and compliance obligations as frameworks develop.
Our experience
Icetana Ltd – AI regulatory compliance across seven jurisdictions
Advised Australian AI surveillance and analytics company icetana.ai on the legal and regulatory treatment of AI-based technologies across Australia, APAC (excluding Japan), the United States, the United Kingdom, Europe and selected Middle Eastern markets. Addressed data privacy, biometric technologies, automated decision-making and AI compliance obligations. Produced a comprehensive multi-jurisdictional regulatory map and a standardised library of cybersecurity and privacy responses for use with channel partners and customers.
Artrya Ltd – AI health software, US market entry
Advised Australian AI-driven cardiovascular diagnostics company Artrya on its software services agreement and HIPAA/HITECH data security addendum with Tanner Medical Center (US). Advised on the intersection of Australian law and US federal, Delaware and Georgia state law. Negotiated limitation of liability, indemnity, IP protection and data residency provisions. Bridged material differences in risk allocation between Australian and US legal frameworks.
Advised on a multi-phase privacy compliance and biometric technology project supporting the adoption of facial recognition technology and body-worn cameras across airport security operations. Addressed regulatory compliance, privacy obligations and contractual risk for novel surveillance systems deployed in critical infrastructure.
Sovereign defence company – IT acquisition
Advised Australia's sovereign submarine builder and sustainer on one of the largest and most complex IT acquisitions undertaken in Australia in the past five years. The assignment involved defence technology procurement requiring detailed technical, contractual and regulatory expertise.
Advised ASX-listed property developer Lendlease on a contract for the supply and installation of fibre telecommunications infrastructure across two large build-to-rent developments. Advised on contract structure, negotiated with network provider Opticomm, and provided ongoing advice on complex factual and commercial matters as they arose. Contracts required compliance with regulatory controls and investor requirements.
Hyland Software – Medical imaging contracts, NSW Health and Queensland Health
Advised US-based Hyland Software on two major public health technology contracts in Australia. First, the supply and implementation of a medical imaging system for the NSW Single Digital Patient Record (SDPR) project, a A$1 billion-plus 10-year program serving 8 million residents across 220 public hospitals. Second, a contract with Metro North Health (Queensland) for a medical imaging system providing 18,000 users with real-time patient imaging access. Advised on GITC contract structure, conducted contract drafting and negotiated terms with both health authorities.
City of Sydney – Outdoor advertising and street furniture contract
Advised the City of Sydney on Australia's largest outdoor advertising and street furniture contract. Originally drafted and negotiated the principal agreement, then provided ongoing advice on amendments, asset relocations and complex operational matters arising under the contract during rollout across the Sydney CBD.
Qube Holdings – First-of-its-kind port operations application
Advised Qube Holdings, Australia's largest logistics provider, on the development and commercialisation of a novel stevedoring application built in collaboration with Google. The assignment required advice on technology development terms, IP ownership, commercialisation structure and deployment arrangements for a first-of-its-kind digital logistics tool in the Australian ports sector.
Advised a global satellite, cellular and GPS communications systems provider on regulatory compliance, contractual frameworks and market entry requirements in the Australian telecommunications sector.
Confidential supplier of solar tracking technologies – Regulatory advice
Advised overseas technology supplier on compliance with Australia’s Security of Critical Infrastructure Act 2018 and Cyber Security Act 2024, focusing on their solar tracking technologies, cross-border operations, and emerging requirements for smart devices, and compliance responsibilities including for critical infrastructure assets, smart device standards and ransomware payment reporting.
Confidential supplier – Complex tender in public transportation sector
Advised our client as supplier on its tender submissions and in contract negotiations to supply a crucial component of a smart ticketing system upgrade to an Australian state transport authority. Our work included: acted as outsourced legal counsel to the supplier's bid team; reviewed and advised on provisions in multi-year hardware, software and services contract; led negotiations with the customer and its legal advisors ensuring our client's core interests remain protected and its contractual responsibilities and risks are aligned with commercial arrangements; and prepared supporting documents to secure internal approval for departures from our client's preferred legal and risk positions.