27Requirement to provide information

27 Requirement to provide information

27 Requirement to provide information

(1) The Minister may, by written notice (an information notice), require a person to provide information for 1 or more of the following purposes—

(a) to determine whether the supply of a form of energy or energy resources to the State or any part of the State has been, or is likely to be, disrupted to a significant degree,

(b) to determine whether there is, or is likely to be, a cyber security incident affecting the effective supply of a form of energy or energy resources to the State or any part of the State,

(c) to plan and prepare for the exercise of powers under this Part if the supply of a form of energy or energy resources is disrupted to a significant degree,

(d) the administration or execution of this Part.

(2) Without limitation, an information notice given to a person may require the person to provide the following information to the Minister—

(a) information about a cyber security incident that the Minister reasonably believes affects the person,

(b) the person’s plan to respond to cyber security incidents,

(c) information about the actions the person has taken, or intends to take, in response to a cyber security incident.

(3) An information notice must specify—

(a) the way the information must be provided, and

(b) the reasonable time in which the information must be provided.

(4) An information notice may be given whether or not a declaration of an energy supply emergency is in force.

(5) A person must not—

(a) without lawful excuse fail to comply with an information notice given to the person, or

(b) provide information, in purported compliance with an information notice, that is false or misleading in a material respect.

Maximum penalty—

(a) for a corporation—2,000 penalty units, or

(b) for an individual—100 penalty units.