Cyber Security Act 2024
17Compliance notice
Start here
Get a plain-English read of 17
Turn the raw legal text into a practical explanation grounded in Cyber Security Act 2024.
17 Compliance notice
(1) The Secretary may give an entity that must comply with an obligation under section 15 or 16 a compliance notice if the Secretary:
(a) is reasonably satisfied that the entity is not complying with the obligation; or
(b) is aware of information that suggests that the entity may not be complying with the obligation.
(2) The compliance notice must:
(b) set out brief details of the non‑compliance or possible non‑compliance; and
(c) specify action within the entity’s control that the entity must take in order to address the non‑compliance or possible non‑compliance; and
(d) specify a reasonable period within which the entity must take the specified action; and
(e) if the Secretary considers it appropriate—specify a reasonable period within which the entity must provide the Secretary with evidence that the entity has taken the specified action; and
(b) give the entity a specified period (which must not be shorter than 10 days) to make representations about the giving of the notice.
(4) Only one compliance notice may be given to an entity in relation to a particular instance of the entity’s non‑compliance, or possible non‑compliance, with an obligation under section 15 or 16.