Australia’s Cybersecurity Strategy Needs a Comprehensive Review to Tackle Emerging Threats, Rather Than Imposing Bans on Social Media Apps

The Australian Government has recently joined other governments in announcing a ban on the use of TikTok on government devices, owing to security fears and the risk of foreign interference through the app. The collection and use of personal information by TikTok, a video-sharing platform operated by ByteDance, have led to concerns that user data could be shared with China. While the ban only affects government devices, the question remains whether the same individuals could be susceptible to foreign interference through their use of TikTok on personal devices. In addition, the broader pool of risks associated with digital platforms and foreign interference remains. , the current affairs commentator, notes that it is time for a new, more effective cybersecurity strategy, rather than whack-a-mole tactical approaches that ban one app after another.

Given that foreign interference can take place on various platforms, Felsenthal recommends that the development of a new cybersecurity strategy should adopt a more holistic approach. Such an approach would address issues around weak security in mobile apps, provide education on digital security and foreign interference, streamline reporting channels for data breaches and cybercrime, and develop appropriate standards on cybersecurity. Strengthening cooperation between government and platforms, as well as targeted prohibitions such as bans on apps that share data for foreign interference could also be considered. Felsenthal suggests that such a strategic approach, especially on education, would give Australians better tools to protect themselves from foreign interference online, which is the best defense.

Felsenthal also notes that the review of the Privacy Act, which is the primary Australian law on data protection, could be an opportunity to change the rules about how data is collected and used by platforms. Such changes would provide less fodder for foreign interference operations, e.g., banning unfair uses, such as targeted messaging based on a psychological profile. Enhancing funding for the primary data regulator, the Office of the Australian Information Commissioner, could also strengthen enforcement across the board.

Felsenthal concludes that what is needed is a strategy, rather than tactics, and better coordination of relevant policies across the government. All the policies and associated agencies, including those for cyber, privacy, education, platform regulation, international relations, and national security, need to work collaboratively if the country is to address the current cybersecurity issues fully. Bans on apps like TikTok are necessary, but such problems require a comprehensive approach beyond addressing one app at a time.