On 3 March 2025, the authorised version of the Cyber Security (Ransomware Payment Reporting) Rules 2025 were registered. The rules establish reporting obligations for entities impacted by ransomware payments under the Cyber Security Act 2024. They a…