Australian Cyber Security Rules 2025

A new Australian Government legislation is coming into effect from March 2026 - The Australian Cyber Security Rules 2025. This new legislation is aimed at providing greater protection and clarity to Australian businesses and customers from cyber threats that may come from unsecured devices with an internet connection – this includes Kyocera A4 printers and MFPs. Some of the initiatives mandated by the new legislation include:

• No universal default passwords: Devices may not be shipped with a factory default password common to all units.
• Vulnerability / security-issue reporting process: Manufacturers must publish security issues and provide updates on their resolution status.
• Product support / security period disclosure: Manufacturers must publicly declare how long the product will be supported.
• Manufacturers and suppliers must ensure that non‑compliant products are not supplied in Australia after March 2026.

For a more detailed overview of the changes, please refer to the legislation.

Information for Kyocera customers

This new legislation will give customers greater confidence to take control of their connected devices. Below is some information that customers may find helpful during this transition.

• The legislation refers to consumer-grade devices, i.e., those intended for personal, domestic or household use. Due to this classification, it affects Kyocera’s range of A4 printers and MFPs.
• All Kyocera’s A4 printers and MFPs will ship with a Statement of Compliance and a unique password in the box.
• Device passwords are located under the device cover with additional information included in the original packaging.
  
  

Security support for Kyocera devices

Kyocera supports all in-scope devices for a minimum of three years from the date the model was first made available in Australia. To ensure full disclosure of these dates, we have included the information below.

Need Help? We’re Here for You

Our support team is always here to help. Please note that password-related enquiries may require additional processing time, and resolutions can take up to four business days.

Device security information and alerts

In alignment with the legislation, manufacturers are also required to publish reported security issues. This list can be found below and will be updated with new alerts – we encourage customers to check this listing regularly to keep up to date with any new alerts and resolutions.