140Cancellation of CIO authorities27

140 Cancellation of CIO authorities27 (1) The Attorney-General or the Director-General may cancel a CIO28 authority at any time and for any reason.29 Note: The Attorney-General may decide to cancel a CIO authority in30 accordance with subsection 135(1) or (2).31 (2) Without limiting subsection (1):32

No. , 2026 Australian Criminal Intelligence Commission Bill 2026 151 (a) the Attorney-General must cancel a CIO authority if the1 Attorney-General is satisfied that the grounds on which the2 authority was granted no longer exist; and3 (b) the Director-General must cancel a CIO authority if the4 Director-General is satisfied that the grounds on which the5 authority was granted no longer exist.6 (3) A cancellation of a CIO authority must:7 (a) be in writing; and8 (b) specify when the cancellation takes effect.9 (4) If the Attorney-General cancels a CIO authority, the10 Attorney-General must cause the Director-General to be notified of11 the cancellation as soon as practicable after the cancellation occurs.12 (5) If the Director-General cancels a CIO authority, the13 Director-General must cause the Attorney-General to be notified of14 the cancellation as soon as practicable after the cancellation occurs.15 (6) A cancellation under this section is not a legislative instrument.16

Division 5 Effect of CIO authorities etc. 152 Australian Criminal Intelligence Commission Bill 2026 No. , 2026 Division 5—Effect of CIO authorities etc.1 141 Effect of CIO authorities2 (1) A CIO authority authorises a person who is identified in the3 authority to engage in the controlled conduct specified in the4 authority in respect of the person.5 (2) The person is authorised to engage in the controlled conduct during6 the period for which the authority is in force.7 (3) However, if any of the following events occur before the end of the8 period for which the authority is in force, the person ceases to be9 authorised to engage in the controlled conduct immediately after10 the event occurs:11 (a) if the CIO authority specifies a shorter period during which12 the person is authorised to engage in the controlled13 conduct—the shorter period ends;14 (b) the CIO authority is varied under section 131 or 134 to15 provide that the person is no longer authorised to engage in16 the controlled conduct;17 (c) the CIO authority is cancelled.18 142 Defect in a CIO authority19 A request for a CIO authority or variation of such an authority, and20 any CIO authority or variation of such an authority granted on the21 basis of such a request, is not invalidated by any defect, other than22 a defect that affects the request, CIO authority or variation in a23 material particular.24