2. Support data governance and security uplift across the economy The Government will review Commonwealth legislative data retention requirements, with a focus on non-personal data, to determine whether existing provisions are appropriately balanced. Complementing our response to the Privacy Act Review, which will examine laws that require retention of personal information, the review will consider any unnecessary burden and vulnerabilities that arise from entities holding significant volumes of data for longer than necessary. Following the outcomes of this review, the Government will explore options to minimise and simplify data retention requirements. The Government will review the data brokerage ecosystem to assess whether further action is required to address risks associated with the transfer of data to malicious actors via data markets. This review will complement the proposed reforms to the Privacy Act. The Government will also develop a voluntary data classification model, offering guidance to help industry identify, assess and communicate the relative value of their data holdings in a consistent and unified way. This will enable businesses to segment information and implement proportionate operational controls, reducing enterprise risk. 10 Promote the safe use of emerging technology The problem we face Emerging technologies are delivering significant benefits across the economy and our society. As technological change accelerates, innovations are near impossible to predict, especially in the long term. Extraordinarily rapid growth in the functionality and scale of digital tools – including expansion in the capabilities of large language models like ChatGPT and text-to-image models like Stable Diffusion – make it difficult to plan for the future. Next-generation connectivity, such as autonomous vehicles or smart cities, will establish a new era of digital infrastructure. Advanced robotics systems will increase the pace of automation, boosting productivity in multiple sectors – including healthcare, manufacturing and agriculture. Building our capabilities in these technologies is important to ensure we can keep pace with change and leverage new opportunities as they emerge. With increased reliance on critical and emerging technology comes the potential for an increased attack surface, expanding scope for malicious actors to attack our digital systems. We are already seeing significant cyber threats posed by these technologies, such as phishing attacks created by generative AI. As these develop, it will become increasingly difficult for the average person to distinguish legitimate communication from malicious attacks and fraud. These technologies are also subject to immense strategic competition, and while presenting a range of benefits, could pose significant risks to our national interest. They will transform economic competitiveness, national and international security, as well as democratic governance and social cohesion. Australia must be ready, and ensure that our digital ecosystem is prepared for rapid transformation. Through continuous horizon scanning, and ongoing analysis of emerging technologies, we need to manage the risks and opportunities posed by these technologies. 32 2023–2030 Australian Cyber Security Strategy