CRIM2010 Chap.6 Cybercrime Offences and Cases in Australian Law
Cybercrime Offences and Cases in Australian Law
Australia’s computer offences sit mainly in Part 10.7, with Parts 7.3 and 10.6, of the Criminal Code Act 1995, introduced after the Cybercrime Act 2001 and aligned with the Council of Europe Convention.
This chapter sets out the main offences and their maximum penalties, compares Commonwealth and NSW access offences, and works through four cases: Salter on exceeding authorised access, Soyke on digital traces, Tasker as a physical comparison and Sulaiman as a cyber-enabled fraud.
It ends with the criminal, civil and regulatory pathways, including the Cyber Security Act 2024.
The cases repay close reading because each teaches a different lesson. Salter separates technical access from legal authority, Soyke shows how personal habits link anonymous activity to a person, and the comparisons with Tasker and Sulaiman raise a policy question about whether hacking is punished in proportion to its harm.
The chapter closes with the debate over extending national jurisdiction across borders.
What this chapter covers
- 01
Digital traces and the attribution paradox
- 02
Jurisdiction, anonymity and evidence
- 03
Criminal Code offences and ceilings
- 04
Salter: login is not authority
- 05
Soyke and Tasker compared
- 06
The Cyber Security Act 2024
Worked example · free
Ceilings for a three-part attack
- 1Entry. Unauthorised access to restricted data, section 478.1: two years.
- 1Corrupting data. Unauthorised modification causing impairment, section 477.2: ten years.
- 1Flooding. Unauthorised impairment of electronic communications, section 477.3: ten years.
- 1Comparison. 10 ÷ 2 = 5, so the flooding ceiling is five times the access ceiling.
Key terms
- Fault element
- The mental element, such as intention or knowledge, that the prosecution must prove for an offence.
- Dual criminality
- The requirement that conduct be an offence in both countries before cooperation such as extradition.
- Chain of custody
- The documented record showing evidence has been preserved without alteration.
- Intensive Correction Order
- A sentence of imprisonment served in the community under conditions.
- Unauthorised access
- Accessing or modifying restricted data while knowing the access is not authorised.
- Extradition
- The formal surrender of a suspect by one country to another for prosecution.
- Restricted data
- Data held in a computer whose access is controlled by a password or other security feature.
Cybercrime Offences and Cases in Australian Law FAQ
What did Salter v DPP (NSW) decide?
A police officer who used a work database to look up her partner’s former girlfriends was convicted of 22 offences. The court held that her permission covered legitimate police work only, so the personal searches were unauthorised, and each screen access could count as a separate offence.
Why was Soyke identified despite hiding his IP address?
Investigators linked the intrusions to services registered in his and his mother’s names, and he had used the same laptop for personal email and Facebook. Those links joined technical traces to a person, which an IP address alone rarely does.
What does the Cyber Security Act 2024 require?
It sets minimum security standards for smart devices, makes certain businesses report ransom payments, limits how the National Cyber Security Coordinator may use information shared after incidents, and creates a Cyber Incident Review Board. Unlike the Criminal Code, it works through civil penalties.
Why can hacking in NSW be charged under Commonwealth law?
Section 478.1 of the Criminal Code and section 308H of the NSW Crimes Act overlap, each with a two-year maximum, and neither must be used first. The choice depends on which agency investigates, whether borders or federal systems are involved, which offence fits the conduct and arrangements between prosecutors.
What did Sulaiman add to the sentencing comparison?
An employee misused workplace access to Telstra’s ordering systems over about 18 months, obtaining goods worth roughly $3.08 million and deleting 1,396 order records. With no prior record and a guilty plea, he served three years in the community, far less than Tasker’s custodial sentence.
Assessment move
Memorise a short table of provisions and maximum penalties, then practise matching invented scenarios to them. For each case, learn the facts in two sentences, the legal point and one number, such as Salter’s 22 offences or Soyke’s three-year sentence.
Prepare a comparison of Soyke and Tasker that you can connect to deterrence theory, and keep the three pathways, criminal, civil and regulatory, ready for questions about responses beyond prosecution. Finish with the four barriers to investigation, jurisdiction, anonymity, digital evidence and under-reporting, and one sentence on how each affects prosecution.
Working through Cybercrime Offences and Cases in Australian Law in CRIM2010? Sia is AskSia’s AI Sociology tutor — ask any CRIM2010 Cybercrime Offences and Cases in Australian Law question and get a clear, step-by-step explanation grounded in how CRIM2010 is taught and assessed. Read this chapter free, then take your hardest questions to Sia.
