26HRequirements for internal authorisations

#### 26H Requirements for internal authorisations (1) An internal authorisation may be given: (a) in writing; or (b) orally in person, or by telephone or other means of communication. (2) The authorisation must specify: (a) the matter (the security matter) that is important in relation to security in respect of which the authorisation is given; and (b) the day and time the authorisation is given; and (c) if the authorisation is given in relation to a particular person—the name of the person (if known) or the fact that the person’s identity is unknown; and (d) if the authorisation is given in relation to an object or a class of object—the object or class of object; and (e) the restrictions or conditions (if any) to which the authorisation is subject. (3) The authorisation must also specify the period for which the authorisation is to remain in force, being a period that: (a) the authorising officer considers reasonable and necessary in the circumstances; and (b) does not exceed 90 days; but the authorising officer may revoke the authorisation before the period has expired. (4) Subsection (3) does not prevent the giving of further internal authorisations in relation to the same security matter. (5) If an internal authorisation is given orally, a written record of the authorisation that meets the requirements of subsections (2) and (3) must be made within 48 hours after the authorisation is given. (6) The following are not legislative instruments: (a) an authorisation under this section; (b) a written record referred to in subsection (5).