26QRegister of internal authorisations

#### 26Q Register of internal authorisations (1) The Director‑General must establish and maintain a register of requests for internal authorisations. (2) The register may be kept by electronic means. (3) The register must include, for each request for an internal authorisation: (a) the name of the person who made the request; and (b) the matter that is important in relation to security in respect of which the authorisation was requested; and (c) the day on which the authorisation was given or refused; and (d) the name of the authorising officer who gave or refused to give the authorisation; and (e) if the authorisation was given: (i) the day on which the authorisation ceased to be in force; and (ii) whether action under the authorisation was discontinued in accordance with section 26P, and, if so, the day on which the action was discontinued; and (f) the location at which any record relating to the request (including the request) is kept by the Organisation. > Note: For the purposes of paragraph (f), the location may be a physical location or an electronic location. (4) The register is not a legislative instrument.