As cloud adoption accelerates, a new report warns that compliance and visibility gaps are putting ANZ organisations at growing risk of data breaches and regulatory failure. According to Commvault’s 2025 “State of Data Readiness” study, 62% of enterprises across Australia and New Zealand now operate in hybrid or multi-cloud environments—yet more than half admit they lack full visibility into their cloud relationships, metadata, and dependencies.
That’s a major red flag, particularly as regulatory complexity grows. One-third of organisations surveyed are subject to at least four overlapping frameworks, including APRA CPS 234 and the Security of Critical Infrastructure (SoCI) Act. Another 27% were unsure whether they were even fully compliant with applicable laws—raising the possibility of enforcement action or reputational fallout in the event of a breach.
“Visibility is the foundation of resilience,” said Martin Creighan, Commvault VP for Asia Pacific. “You can’t protect what you can’t see—and without full insight into cloud environments, effective recovery and compliance are nearly impossible.”
Data sprawl, accelerated by rapid digital transformation and increased use of AI-powered systems, is complicating the compliance picture even further. Over half of ANZ organisations now face conflicting regulatory requirements across different jurisdictions, particularly when managing cross-border data transfers.
The report also finds that in the event of a cyberattack, chaos often extends beyond data recovery into the realm of compliance reporting. With regulators demanding near-real-time disclosures, any delay in understanding the scope and nature of an incident can compound the fallout.
“This is no longer just about backing up your data,” added Gareth Russell, Commvault Field CTO. “Organisations need to design for continuous compliance and rapid recovery—not scramble to respond after the fact.”
As organisations face more scrutiny from regulators, customers, and partners, the message is clear: resilience today must include not just robust infrastructure, but governance, visibility, and a proactive compliance mindset.
See the full report here: https://www.commvault.com/resources/analyst-report/the-state-of-data-readiness-au-nz-2025
