130System Administrator’s power to give directions to protect the integrity or performance of the Australian Government Digital ID System

130 System Administrator’s power to give directions to protect the integrity or performance of the Australian Government Digital ID System

(1) The System Administrator may give a direction to the following entities if the System Administrator considers it necessary to do so to protect the integrity or performance of the Australian Government Digital ID System: (a) entities that hold an approval to participate in the Australian Government Digital ID System; (b) entities whose approval to participate in the Australian Government Digital ID System is suspended. (2) Without limiting subsection (1), the System Administrator may give a direction to do one or more of the following: (a) take or not take specified action in relation to the performance of the Australian Government Digital ID System; (b) conduct a fraud assessment in relation to a specified matter and provide a copy of the report to the System Administrator in relation to the assessment; (c) conduct a security assessment in relation to a specified matter and provide a copy of the report to the System Administrator in relation to the assessment; (d) an act or thing specified by the Digital ID Rules. (3) If Accreditation Rules made for the purposes of section 28 prescribe requirements in relation to the conduct of an assessment mentioned in subsection (2), the assessment must comply with the requirements. (4) The direction must: (a) be in writing; and (b) specify the reason for the direction. (5) An entity must comply with a direction given under subsection (1).

Civil penalty: 1,000 penalty units.

(6) A direction under subsection (1) is not a legislative instrument.