23Due diligence requirements—risk mitigation

23 Due diligence requirements—risk mitigation

(1) This section applies to a processor in relation to the processing of a raw log if: (a) section 22 applies in relation to the raw log; and (b) the processor has identified a risk that the raw log may be illegally logged; and (c) the risk is not a low risk. (2) The processor must, before processing the raw log: (a) conduct a risk mitigation process that is adequate and proportionate to the identified risk; and (b) make a written record of the risk mitigation process undertaken in accordance with this section. (3) The risk mitigation process may include the following steps: (a) obtain further information about the raw log, including any certification or independent assessment in relation to the raw log; (b) reassess the risk that the raw log may be illegally logged, including by using the procedures in subsection 20(2), 21(2) or 22(2); (c) not process the raw log. Civil penalty provision (4) A processor is liable to a civil penalty if the processor contravenes subsection (2).

Civil penalty: 100 penalty units.