New government cyber guidance published 7 October 2026 helps independent hairdressers protect appointment systems, business email, payment logins and client information.
Abby's take
What this means for the industry — and for independents
Industry impact. The Australian Signals Directorate released its Small business cyber security handbook on 7 October 2026 during Cyber Security Action Month. This is guidance for small businesses, not a new salon-specific law.
For freelancers. For an independent hairdresser, the phone, business email and appointment system often hold the daily workflow together. A security problem can mean missed bookings and delayed client communications.
My take. I would start with the email that resets other accounts, then the booking and payment systems. Stronger authentication and one tested backup are more valuable than a pile of new software nobody knows how to recover.
What I'd do next
- Identify the owner and recovery settings of your business email, booking platform, socials and payment accounts before the next trading day.
- Enable multi-factor authentication or passkeys where supported and remove unused access given to former collaborators.
- Install security updates and test that important business and client information can be restored from a protected backup.
Watch-out. The publication is practical advice and does not itself create a new licensing rule for salons; privacy, recordkeeping and incident obligations vary by circumstances.
What changed on 7 October 2026
The Australian Signals Directorate's Australian Cyber Security Centre published a new small business cyber security handbook. It covers secure accounts, devices, data and incidents, using practical guidance for small operators.
Protect the account that controls recovery
Check the business email used for password resets, then secure booking and payment accounts with multi-factor authentication or passkeys. Keep recovery options current and protected.
Reduce access and test your backup
Remove permissions that helpers no longer need. Update devices and applications, then confirm that a backup can actually restore the information required to manage a disrupted appointment day.
Check unusual payment changes
ASD advises verifying unexpected payment requests through a trusted channel. Contact the real supplier through known details rather than replying to a suspicious message.
Official sources checked 11 October
ASD Small business cyber security handbook, published 7 October 2026: https://www.cyber.gov.au/publication/small-business-cyber-security-handbook . ASD Cyber Security Action Month announcement, 1 October: https://www.cyber.gov.au/news/take-a-second-to-stay-secure-this-cyber-security-action-month
Make the next decision with better information
Use The Beauty Basement's free tool to put your next business decision on a practical footing.
Get your Freelancer Business ScoreDisclaimer: General information only, not legal, financial or technical advice. Confirm the current official guidance and provider terms for your business.
Common questions
Was a new salon cyber law announced on 7 October?
No. The development is a newly published government handbook for small businesses.
Which account should a hairdresser secure first?
Start with business email, then booking, payment and social media accounts.
Are backups worthwhile for a solo stylist?
Yes, where supported by the system and privacy obligations, if they are protected and can be restored.
Next step at The Beauty Basement
Plan the next step with confidence
Use a clear checklist and the right numbers before you commit.
Keep going — related resources