76ACyber security directions

76A Cyber security directions

76A Cyber security directions

(1) The Minister may, by written order, give a direction (a cyber security direction) to a network operator requiring the operator to take the action the Minister considers reasonably necessary to—

(a) respond to the impact of a cyber security incident on the operator’s information technology systems, or

(b) prevent a cyber security incident having an impact on the operator’s information technology systems.

(2) A copy of the Minister’s written order under subsection (1) must be given to each network operator to whom the direction applies.

(3) A cyber security direction—

(a) operates for the period specified in the direction, and

(b) may be varied or revoked by a subsequent direction under this section.

(4) A person given a cyber security direction must comply with the direction.

Maximum penalty for subsection (4)—

(a) for a corporation—

(i) 2,000 penalty units, and

(ii) for a continuing offence—a further 200 penalty units for each day the offence continues, or

(b) for an individual—

(i) 400 penalty units, and

(ii) for a continuing offence—a further 40 penalty units for each day the offence continues.

s 76A: Ins 2010 No 50, Sch 1.2 [1]. Rep 2012 No 38, Sch 2 [43]. Ins 2021 No 34, Sch 4[15]. Am 2025 No 21, Sch 1[30].