Privacy and data security In July last year, APRA introduced a new Prudential Standard for Information Security – CPSregulated entities take additional measures to be resilient against information security incidents, including cyber attacks.