Subdivision 6.1A.6Record‑keeping

### Division 4.2—Matters to be dealt with in ship security plan #### 4.20 Identification of ship A ship security plan must be accompanied by a document setting out the following information about the ship: (a) name of the ship; (b) the ship’s official number; (c) if the plan is for a regulated Australian ship that is used for overseas voyages—the ship’s IMO ship identification number; (d) any other distinctive numbers or letters that identify the ship; (e) type of ship; (f) radio call sign; (g) date and port of registry; (h) year built; (i) deadweight tonnage; (j) gross tonnage; (k) length and breadth of ship; (l) summer draft; (m) number of crew; (n) number of passenger berths; (o) whether the ship is engaged in overseas or inter‑State voyages. > Note: For the definition of official number, see subregulation 1.03(1). #### 4.25 Security assessments A ship security assessment for a regulated Australian ship must include the following matters: (a) the date when the assessment was completed or reviewed; (b) the scope of the assessment, including assets, infrastructure and operations assessed; (c) a summary of how the assessment was conducted, including details of the risk management process adopted; (d) the skills and experience of the key persons who completed or participated in the assessment; (e) the results of the examination and evaluation of the existing shipboard protective measures, procedures and operations; (f) a statement outlining the risk context or threat situation for the ship, including consideration of trading routes; (g) identification and evaluation of key shipboard operations that need to be protected; (h) identification of possible risks or threats to the key shipboard operations and the likelihood and consequences of their occurrence; (i) identification of existing security measures, procedures and operations; (j) identification of weaknesses (including human factors) in the infrastructure, policies and procedures; (k) identification, selection and prioritisation of possible risk treatments (for example, counter‑measures and procedural changes that need to be implemented) and their effectiveness in reducing risk levels and vulnerabilities. #### 4.30 Ship operator, CSO and SSO (1) A ship security plan must be accompanied by a document setting out the following information: (a) the name of the ship operator; (b) the name of the Chief Executive Officer of the ship operator; (c) the name or position of the person who is to be the CSO for the ship; (d) the contact details for the CSO; (e) the name and contact details for the SSO. (2) A ship security plan may set out duties and responsibilities of a CSO or SSO that are in addition to the duties and responsibilities of a CSO and SSO in sections 11.2 and 12.2, respectively, of Part A of the ISPS Code. (3) A ship security plan must set out how the CSO will communicate with the master of the ship if the Secretary or a maritime industry participant acting on behalf of the Secretary: (a) gives notice that a maritime security level is in force for the ship; or (b) gives a security direction to the ship. #### 4.31 Obligation to keep information current (1) A ship operator must, within 2 working days after the ship operator becomes aware of a change in any of the information given under regulation 4.20 or 4.30, notify the Secretary, in writing, of the change. Penalty: 20 penalty units. (2) An offence against subregulation (1) is an offence of strict liability. #### 4.35 Shore‑based personnel and crew with security role (1) A ship security plan must identify, by reference to their positions, shore‑based personnel and crew with, or who have been assigned, security duties and responsibilities. (2) The security duties and responsibilities of personnel and crew so identified must be set out in the plan, together with: (a) the knowledge, skills and other requirements for the security‑related aspects of their positions; and (b) the training or qualifications that satisfy the requirements referred to in paragraph (a). #### 4.40 Training A ship security plan must set out the training that a CSO, SSO, and shore‑based personnel and crew referred to in regulation 4.35 must receive. #### 4.45 Matters that must be in plan A ship security plan must address the following matters: (a) measures to prevent unauthorised carriage or possession of weapons or prohibited items on board the ship; (b) identification of on‑board security zones; (c) measures to prevent unauthorised access to the ship and any on‑board security zones; (d) procedures for responding to security threats or breaches of security, including procedures for maintaining critical operations of ship/port interface; (e) procedures for: (i) acknowledging, and responding to, directions given by the Secretary or a contracting government; and (ii) acknowledging notifications of the security level in force from the Secretary or a contracting government; (f) procedures for evacuation of the ship in case of security threats or breaches of security; (g) procedures for drills and exercises associated with the plan; (h) procedures for interfacing with port, port facility and offshore facility security activities; (i) procedures for modifying the plan to correct deficiencies or to update the plan to take into account changes to the ship; (j) procedures for reporting occurrences which threaten the security of the ship; (k) measures to ensure the security of the information contained in the plan. #### 4.50 Maritime security level 1 A ship security plan must set out, in relation to maritime security level 1: (a) the security measures identified in the ship security assessment for implementation at that level; and (b) the measures that have been implemented; and (c) a schedule for implementing the measures that have not been implemented; and (d) any interim measures that will be implemented until the measures referred to in paragraph (c) are fully implemented. #### 4.55 Maritime security levels 2 and 3 A ship security plan must set out, in relation to maritime security levels 2 and 3: (a) the security measures identified in the ship security assessment for implementation at those levels; and (b) the additional security measures that the ship will implement if the Secretary declares that maritime security level 2 or 3 is in force for the ship. #### 4.60 Declarations of security A ship security plan must provide for: (a) the circumstances in which the ship will request a declaration of security with another ship or person; and (b) the procedures for negotiating the security measures and responsibilities of the ship and of the other ship or person in those circumstances; and (c) how security measures identified in a declaration will be implemented to ensure compliance by the parties with their security plans and with the declaration. #### 4.65 On‑board security zones (1) If the ship operator for a regulated Australian ship wishes the Secretary to establish an on‑board security zone for the ship, the ship security plan must set out: (a) the purpose for the proposed establishment of the zone; and (b) the boundaries of the zone; and (c) the security measures and procedures to be taken to control access into the zone by people or things; and (d) steps to be taken to inform people that the on‑board security zone has been established and that entry into the zone without authority is an offence; and (e) the name or position of the person or persons responsible for the security measures, procedures or steps referred to in paragraphs (c) and (d); and (f) if applicable, the period when, or the circumstances in which, the zone is in force. (2) A ship security plan must set out security measures and procedures to monitor and control access to on‑board security zones, including measures to detect and deter unauthorised access to those zones. #### 4.70 Security of ship in non‑ISPS Code compliant ports (1) This regulation applies if it is envisaged by the ship operator that a regulated Australian ship may call at ports or locations that are not port facilities or are port facilities the operators of which are not required to have, or do not have, security plans. (2) A ship security plan must outline specific measures that will be implemented if the ship calls at ports or locations described in subregulation (1) so that any risks associated with those ports or locations are not transferred to the ship. #### 4.75 Security of ship in exceptional circumstances A ship security plan must give sufficient guidance on how the security of the ship will be maintained in exceptional circumstances such as search and rescue operations, humanitarian crises, extreme weather conditions and other emergencies. #### 4.80 Pre‑entry information (1) A ship security plan for a regulated Australian ship that is used for overseas voyages must set out the procedures for giving pre‑entry information in accordance with subregulations (2) and (3). (2) The master of a regulated Australian ship that is due to arrive, from a place outside Australia, at a port in Australia must give the following information (pre‑entry information) to a customs officer: (a) confirmation that a valid ISSC is on board the ship; (b) the name of the authority that issued the ship’s ISSC; (c) the date when the ISSC expires; (d) the maritime security level at which the ship is operating; (e) the last 10 ports of call where the ship conducted ship/port interface; (f) whether the ship operated at a security level different from that in paragraph (d), engaged in ship to ship activity, or implemented any special or additional security measures, in the last 10 ports of call; (g) if known, the next 4 ports of call of the ship (whether in or outside Australia) after the port in relation to which the information is being given. (3) Pre‑entry information must be given at the time the crew report required under section 64ACB of the Customs Act 1901 is given in relation to the port. > Note: Section 6 of the Navigation Act 1912 defines overseas voyage as follows: > overseas voyage, in relation to a ship, means a voyage in the course of which the ship travels between: (a) a port in Australia and a port outside Australia; (b) a port in Australia and a place in the waters of the sea above the continental shelf of a country other than Australia; (c) a port outside Australia and a place in the waters of the sea above the continental shelf of Australia; (d) a place in the waters of the sea above the continental shelf of Australia and a place in the waters of the sea above the continental shelf of a country other than Australia; (e) ports outside Australia; or (f) places beyond the continental shelf of Australia. #### 4.85 Maritime transport or offshore facility security incidents A ship security plan must set out procedures for: (a) reporting maritime transport or offshore facility security incidents to the Secretary; and (b) responding to security threats and breaches of security, including provisions for maintaining critical operations of the ship or ship/port interface or the ship/facility interface. #### 4.90 Security equipment A ship security plan must: (a) include a list of the security equipment on board the ship; and (b) describe the measures to ensure the inspection, testing, calibration and maintenance of security equipment; and (c) set out the frequency for testing and calibration of security equipment; and (d) set out procedures to ensure that only correctly calibrated security equipment is used on board the ship. #### 4.95 On‑board systems (1) A ship security plan must include information about the following systems on board the ship: (a) external and internal communications systems; (b) surveillance, identification, monitoring and reporting systems; (c) tracking and positional systems. (2) If a ship is provided with a ship security alert system, the ship security plan must: (a) describe the operational characteristics of the system; and (b) describe the ship security alert that will be transmitted from the system; and (c) describe the performance standards to which the system must conform, being standards not below those adopted by the IMO; and (d) set out the procedures, instructions and guidance for using, testing, activating, de‑activating and resetting the system, and for preventing false alarms. #### 4.100 Ship security records A ship security plan must set out: (a) the ship security records that are required to be kept on, by and for the ship in accordance with regulation 1.55; and (b) a plan for keeping and preserving ship security records; and (c) the procedures for making those records available for inspection in accordance with subregulation 1.55(3A). #### 4.105 Security plan audits and reviews A ship security plan must set out: (a) a schedule of security plan audits; and (b) the circumstances, in addition to the occurrence of a maritime transport security incident, following which a security plan review must be conducted; and (c) the procedures for conducting a security plan audit, including a process for selecting auditors who are independent of the matters being audited; and (d) the procedures for conducting a security plan review, including a process for consultation during the review. ### Division 4.3—Form of ship security plan #### 4.110 Statement about authority of master A ship security plan must include a statement to the following effect: ‘The master of the ship has the overriding authority and responsibility to make decisions with respect to the safety and security of the ship and to request the assistance of the ship operator or of any contracting government to the SOLAS Convention, as may be necessary.’. > Note: For the definition of SOLAS Convention, see section 10 of the Act. #### 4.115 Protection of plan The ship operator for a regulated Australian ship must ensure that the ship security plan for the ship is protected against unauthorised access, amendment and disclosure. ### Division 4.4—Ship security plans—exemptions, approvals, revisions and cancellations #### 4.120 Application for exemption—prescribed requirements (1) For subsection 61A(2) of the Act, this regulation prescribes requirements for an application for an exemption from the operation of Division 2 of Part 4 of the Act. Form of application (2) The application must be made in writing to the Secretary. Content of application (3) If an ISSC is in force for the ship, the application must include a copy of the ISSC. (4) The application must include the following information: (a) the ship’s: (i) name; and (ii) type; and (iii) operating company; and (iv) gross tonnage; and (v) official number; and (b) if an IMO ship identification number has been assigned to the ship—that number; (c) any other number that uniquely identifies the ship, composed of: (i) letters; or (ii) numbers; or (iii) a combination of letters and numbers; (d) the name of the ship’s: (i) master; and (ii) SSO; and (iii) CSO; and (iv) port of registry; (e) whether a ship security plan is in force for the ship; (f) information about the requested exemption, including: (i) the commencement date and expiry date of the period in which the exemption will, if granted, have effect; and (ii) the ship’s last 10 ports of call; and (iii) the ship’s last port of call before the exemption will, if granted, commence; and (iv) the ship’s first port of call after the exemption will, if granted, commence; and (v) the reasons an exemption is required; and (vi) details of all voyages that the ship operator intends the ship to undertake without a ship security plan, including details of the intended route and any intended ports of call along the route; and (vii) whether the ship will carry passengers during all or part of the period in which the exemption will, if granted, have effect; and (viii) whether the ship will carry cargo during all or part of the period in which the exemption will, if granted, have effect; (ix) any other information that the ship operator would like the Secretary to consider in deciding whether or not to grant the exemption. > Note: Information about the IMO’s ship identification number scheme is available at http://www.imo.org. #### 4.125 Matters the Secretary must consider For subsection 61A(3) of the Act, the following matters are prescribed: (a) the information mentioned in paragraphs 4.120(4)(a) to (f); (b) whether the voyage for which the ship operator has applied for an exemption is a rare occurrence; (c) whether the circumstances that give rise to the need for the exemption are exceptional; (d) whether there is a threat of a terrorist act against the ship; (e) whether there is a risk of the ship being used to facilitate a terrorist act or an unlawful interference with maritime transport or offshore facilities; (f) whether granting an exemption will bring an increased risk of a terrorist act against: (i) any Australian port; or (ii) any other vessel; (g) whether the ship will carry passengers during all or part of the period in which the exemption will, if granted, have effect; (h) whether the ship will carry cargo during all or part of the period in which the exemption will, if granted, have effect; (i) whether the ship operator has applied for an exemption to undertake a voyage for the purpose of: (i) delivery of a ship; or (ii) maintenance, refitting or any other modification of a ship. ### Division 4.5—International ship security certificates #### 4.140 Applications for ISSC (1) For subsection 81(2) of the Act, an application for an ISSC must be in writing and must: (a) identify the ship by means of the following: (i) the name of the ship; (ii) the ship’s official number; (iii) if the ship is used for overseas voyages—the ship’s IMO ship identification number; (iv) any other distinctive numbers or letters that identify the ship; and (b) include a statement that a ship security plan is in force for the ship. (2) The application must also state when the ship may be inspected for the purpose of determining whether the ship meets the requirements necessary for ISSC verification. > Note: For the definition of official number, see subregulation 1.03(1). #### 4.145 Inspections by authorised persons The ISSC for a regulated Australian ship must be made available for inspection at the request of a person who is authorised by a contracting government to request information about, or in connection with, whether a valid ISSC is in force for the ship. > Note: For the power of maritime security inspectors and duly authorised officers to inspect ISSCs, see subparagraphs 139(2)(e)(i) and 148(2)(c)(i) of the Act, respectively. #### 4.150 Application for exemption—prescribed requirements (1) For subsection 79A(2) of the Act, this regulation prescribes requirements for an application for an exemption from the operation of Division 6 of Part 4 of the Act. Form of application (2) The application must be made in writing to the Secretary. Content of application (3) If an ISSC is in force for the ship, the application must include a copy of the ISSC. (4) The application must include the following information: (a) the ship’s: (i) name; and (ii) type; and (iii) operating company; and (iv) gross tonnage; and (v) official number; and (b) if an IMO ship identification number has been assigned to the ship—that number; (c) any other number that uniquely identifies the ship, composed of: (i) letters; or (ii) numbers; or (iii) a combination of letters and numbers; (d) the name of the ship’s: (i) master; and (ii) SSO; and (iii) CSO; and (iv) port of registry; (e) whether a ship security plan is in force for the ship; (f) information about the requested exemption, including: (i) the commencement date and expiry date of the period in which the exemption will, if granted, have effect; and (ii) the ship’s last 10 ports of call; and (iii) the ship’s last port of call before the exemption will, if granted, commence; and (iv) the ship’s first port of call after the exemption will, if granted, commence; and (v) the reasons an exemption is required; and (vi) details of all voyages that the ship operator intends to undertake without an ISSC, including details of the intended route and any intended ports of call along the route; and (vii) whether the ship will carry passengers during all or part of the period in which the exemption will, if granted, have effect; and (viii) whether the ship will carry cargo during all or part of the period in which the exemption will, if granted, have effect; and (ix) any other information that the ship operator would like the Secretary to consider in deciding whether or not to grant the exemption. > Note: Information about the IMO’s ship identification number scheme is available at http://www.imo.org. #### 4.155 Matters the Secretary must consider For subsection 79A(3) of the Act, the following matters are prescribed: (a) the information mentioned in paragraphs 4.150(4)(a) to (f); (b) whether the voyage for which the ship operator has applied for an exemption is a rare occurrence; (c) whether the circumstances that give rise to the need for the exemption are exceptional; (d) whether there is a threat of a terrorist act against the ship; (e) whether there is a risk of the ship being used to facilitate a terrorist act or an unlawful interference with maritime transport or offshore facilities; (f) whether granting an exemption will bring an increased risk of a terrorist act to: (i) any Australian port; or (ii) any other vessel; (g) whether the ship will carry passengers during all or part of the period in which the exemption will, if granted, have effect; (h) whether the ship will carry cargo during all or part of the period in which the exemption will, if granted, have effect; (i) whether the ship operator has applied for an exemption to undertake a voyage for the purpose of: (i) delivery of a ship; or (ii) maintenance, refitting or any other modification of a ship. ## Part 5—Regulated foreign ships ### Division 5.1—Obligations #### 5.10 Pre‑arrival information (1) For subsection 92(2) of the Act, pre‑arrival information must be given to a customs officer by the master of a ship that is due to arrive, from a place outside Australia, at a port in Australia (whether the first port or any subsequent port on the same voyage) at the time the crew report required under section 64ACB of the Customs Act 1901 is given in relation to the port. (2) For the definition of pre‑arrival information in subsection 92(3) of the Act, the following are prescribed: (a) confirmation that a valid ISSC, or approved ISSC equivalent under subsection 91(3) of the Act, is on board the ship; (b) the name of the authority that issued the ship’s ISSC or approved ISSC equivalent; (c) the date when the ISSC or approved ISSC equivalent expires; (d) the security level at which the ship is operating; (e) the last 10 ports of call where the ship conducted ship/port interface; (f) whether the ship operated at a security level different from that in paragraph (d), engaged in ship to ship activity, or implemented any special or additional security measures, in the last 10 ports of call; (g) if known, the next 4 ports of call of the ship (whether in or outside Australia) after the port in relation to which the information is being given. ### Division 5.2—Control directions #### 5.20 Requirement for consultation If it is reasonable and practicable to do so, the Secretary must consult with the following about giving a control direction that relates to the movement of ships within, or in or out of, a security regulated port: (a) maritime industry participants who will be affected by the direction; (b) agencies of the Commonwealth, a State or Territory whose operations in the port will be affected by the direction; (c) persons, other than those mentioned in paragraph (a) or (b), who need to implement, or comply with, the direction. > Note: Examples: For paragraph (c), harbour masters and PSOs. #### 5.25 Giving control directions (Act s 99(7)) The Secretary must give a control direction to the ship operator for, or the master of, a regulated foreign ship: (a) orally (for example, by telephone or radio communication); or (b) in writing; or (c) by electronic transmission (for example, by fax or e‑mail). > Note: Under subsection 99(5) of the Act, a control direction has no effect until the Secretary commits the direction to writing. ## Part 5A—Offshore security plans ### Division 5A.1—Preliminary #### 5A.05 Common requirements for security assessments A security assessment for an offshore security plan must include the following matters: (a) the date when the assessment was completed or reviewed; (b) the scope of the assessment, including assets, infrastructure and operations assessed; (c) a summary of how the assessment was conducted, including details of the risk management process adopted; (d) the skills and experience of the key persons who completed or participated in the assessment. #### 5A.10 Common requirements for security plan audits and reviews An offshore security plan for an offshore industry participant must set out: (a) a schedule of security plan audits; and (b) the circumstances, in addition to the occurrence of a maritime transport or offshore facility security incident, following which a security plan review must be conducted; and (c) the procedures for conducting a security plan audit, including a process for selecting auditors who are independent of the matters being audited; and (d) the procedures for conducting a security plan review, including a process for consultation during the review. #### 5A.15 Offshore facility operator to give information The operator of an offshore facility must give to each offshore service provider conducting operations at the facility: (a) the information set out in regulation 5A.30; and (b) the measures to be used by the operator to inform persons of the location of offshore security zones established by the operator for the facility; and (c) the measures to confirm the identity of persons who are authorised to have access to the zones. > Note: The information for paragraph (a) must include the contact details for the OFSO. #### 5A.20 Offshore service provider to give information An offshore service provider that is required to have a security plan must give to the operator of each offshore facility to which the service provider conducts operations: (a) the information set out in regulation 5A.120; and (b) a description of the boundaries of the service provider’s supply base and the arrangements made to ensure the security of goods that are to be transported to the facility; and (c) details of each vessel or aircraft operated by the service provider to service the facility; and (d) the measures to be used by the service provider to inform persons of the security arrangements, including any security zones, at the service provider’s supply base; and (e) details of the measures to be used to confirm the identity of persons who are allowed to enter: (i) the supply base; and (ii) any security zone established in the supply base; and (iii) a vessel or aircraft operated by the service provider. > Note: The information for paragraph (a) must include the contact details for the OSPSO. ### Division 5A.2—Offshore facility operators #### Subdivision 5A.2.1—Matters to be dealt with in plan #### 5A.25 Offshore security plans (Act s 100H) For section 100H of the Act, this Subdivision prescribes the matters that are to be dealt with in an offshore security plan for an offshore facility operator. > Note: An offshore facility operator that has more than 1 facility may prepare 1 plan for each facility, or 1 plan covering a number of facilities that are in the same area, and are physically and operationally similar, and that have identical risk assessments. #### 5A.30 Offshore facility operator details An offshore security plan for an offshore facility operator must be accompanied by a document setting out the following information: (a) the name of the operator; (b) contact details for the operator; (c) name of the Chief Executive Officer and the HSO of the operator; (d) the name and location of each facility; (e) name or position of the person who is to be the OFSO for each facility covered by the plan; (f) the contact details for the OFSO of the operator. #### 5A.35 Details of offshore service providers An offshore security plan for an offshore facility operator must be accompanied by a document setting out the name of, and contact details for, the OSPSO of each offshore service provider conducting operations at each facility. #### 5A.40 Obligation to keep information current (1) An offshore facility operator must, within 2 working days after becoming aware of a change in any of the information given under regulation 5A.30 or 5A.35, notify the Secretary, in writing, of the change. Penalty: 20 penalty units. (2) An offence against subregulation (1) is an offence of strict liability. #### 5A.45 Security assessments (1) In addition to the matters required under regulation 5A.05, a security assessment for an offshore facility operator’s operation must include the following matters: (a) a statement outlining the risk context or threat situation for each facility; (b) identification and evaluation of important assets, infrastructure and operations that need to be protected; (c) identification of possible risks or threats to assets, infrastructure and operations, and the likelihood and consequences of their occurrence; (d) identification of existing security measures, procedures and operations; (e) identification of weaknesses (including human factors) in the infrastructure, policies and procedures; (f) identification, selection and prioritisation of possible risk treatments (for example, counter‑measures and procedural changes that need to be implemented) and their effectiveness in reducing risk levels and vulnerabilities. (2) A security assessment for an offshore facility operator’s operation must consider: (a) the types of vessels or aircraft used, and the types of cargoes transported, in operations to and from each offshore facility; and (b) any special risks or threats associated with the vessels, aircraft and cargoes. #### 5A.50 OFSO qualifications and responsibilities An offshore security plan for an offshore facility operator must set out: (a) the knowledge, skills and other requirements for the OFSO; and (b) the training or qualifications that satisfy the requirements referred to in paragraph (a); and (c) the training that must be given to the OFSO. #### 5A.55 Other personnel with security role (1) An offshore security plan for an offshore facility operator must identify, by reference to their positions, personnel who have been assigned security duties and responsibilities in addition to those of the OFSO. (2) The security duties and responsibilities of personnel so identified must be set out in the plan, together with: (a) the knowledge, skills and other requirements for the security‑related aspects of their positions; and (b) the training or qualifications that satisfy the requirements referred to in paragraph (a); and (c) the training that must be given to such personnel. #### 5A.60 Matters that must be in plan (1) An offshore security plan for an offshore facility operator must address, in addition to the matters required under regulation 5A.05, the following matters: (a) measures to prevent unauthorised carriage or possession of weapons or prohibited items on a facility or on board vessels or aircraft interfacing with a facility; (b) measures to prevent unauthorised access to: (i) an offshore security zone established within and around a security regulated offshore facility; or (ii) a ship security zone declared to operate around a security regulated ship while the ship is in the vicinity of a security regulated offshore facility and is engaged in any activity in relation to the facility; (c) procedures for responding to security threats or breaches of security, including procedures for maintaining critical operations at a facility; (d) procedures for responding to security threats or breaches of security occurring during any interface between a vessel or aircraft and a facility; (e) procedures for responding to any security directions given by the Secretary; (f) procedures for evacuation of each facility in case of security threats or breaches of security; (g) procedures for drills and exercises associated with the plan; (h) procedures for interfacing with the security activities of other maritime industry participants and operators of any aircraft that may land on or near a facility; (i) procedures for modifying the plan to correct deficiencies or to update the plan to take into account changes to a facility; (j) procedures for reporting occurrences which threaten the security of a facility; (k) measures to ensure the security of the information contained in the plan; (l) measures to ensure the security of cargo and of cargo handling equipment at a facility; (m) procedures in case the ship security alert system of a ship is activated while it is near a facility; (n) procedures to be followed when an offshore facility is directly connected to, or engaging in any activity with, a vessel such as a floating hotel, mobile drilling unit or construction barge. (2) In determining appropriate measures for paragraphs (1)(a) and (b), the facility operator must have regard to the special risks or threats associated with the types of vessels and aircraft used to provide services for each offshore facility and the types of cargo carried by the vessels and aircraft. #### 5A.65 Consultation An offshore security plan for an offshore facility operator must set out, for the purpose of coordinating security‑related activities, a mechanism for consultation between the offshore facility operator and: (a) each offshore industry participant conducting operations at (or interfacing with) a facility and any other stakeholder who may be affected by the implementation of the plan; and (b) the operator’s employees (or their representatives) regarding security measures and procedures to be implemented. #### 5A.70 Maritime security level 1 An offshore security plan for an offshore facility operator must set out, in relation to maritime security level 1: (a) the security measures, identified in the security assessment for the operation, for implementation at that level; and (b) the measures that have been implemented; and (c) a schedule for implementing the measures that have not been implemented; and (d) any interim measures that will be implemented until the measures referred to in paragraph (c) are fully implemented. #### 5A.75 Maritime security levels 2 and 3 An offshore security plan for an offshore facility operator must set out, in relation to maritime security levels 2 and 3, the additional security measures that the operator will implement if the Secretary declares that maritime security level 2 or 3 is in force for a facility of the operator. #### 5A.80 Declarations of security An offshore security plan for an offshore facility operator must provide for: (a) the circumstances in which the operator will request a declaration of security with another offshore industry participant; and (b) the procedures for negotiating the security measures and responsibilities of the operator and the participant in those circumstances; and (c) how security measures identified in a declaration will be implemented to ensure compliance by the operator and the participant with their security plans and with the declaration. #### 5A.85 Offshore facility zone (1) If an offshore facility operator wishes the Secretary to establish an offshore facility zone for a facility, the offshore security plan for the operator must set out: (a) the boundaries of the zone; and (b) the security measures and procedures to be taken to control access into the zone by people, aircraft or things; and (c) steps to be taken to inform people that an offshore facility zone is in force and that entry into the zone without authority is an offence; and (d) the name or position of the person or persons responsible for the security measures, procedures or steps referred to in paragraphs (b) and (c). (2) The security plan must set out security measures and procedures to monitor and control access to the zone, including measures to detect and deter unauthorised access to the zone. #### 5A.90 Offshore water‑side zone (1) If an offshore facility operator wishes the Secretary to establish an offshore water‑side zone for a facility, the offshore security plan for the operator must set out: (a) the boundaries of the zone; and (b) the security measures and procedures to be taken to control access into the zone by people, vessels, aircraft or things; and (c) steps to be taken to inform people that an offshore water‑side zone is in force and that entry into the zone without authority is an offence; and (d) the name or position of the person or persons responsible for the security measures, procedures or steps referred to in paragraphs (b) and (c). (2) The security plan must set out security measures and procedures to monitor and control access to the zone, including measures to detect and deter unauthorised access to the zone. #### 5A.92 Ship security zones An offshore security plan for an offshore facility operator must set out security measures and procedures to monitor and control access to ship security zones, including measures to detect and deter unauthorised access to those zones. #### Subdivision 5A.2.2—Form of plan #### 5A.95 Requirements for plans (Act s 100I) For section 100I of the Act, this Subdivision sets out requirements for the preparation of an offshore security plan. #### 5A.100 Information for offshore security plans The information that must accompany an offshore security plan for an offshore facility operator must: (a) show the location (including the geographical coordinates) of each facility in a way that enables the Secretary to gazette the location of the facility; and (b) include a diagram of a size and scale of each facility and surrounding water that shows the layout of the facility and of any offshore security zone. #### 5A.105 Protection of plan An offshore facility operator must ensure that the offshore security plan for the operator’s facility is protected against unauthorised access, amendment and disclosure. ### Division 5A.3—Offshore service providers #### Subdivision 5A.3.1—Preliminary #### 5A.110 Service providers to have offshore security plans (Act s 100B) (1) For paragraph 100B (b) of the Act, an offshore industry participant that is an offshore service provider is prescribed. (2) However subregulation (1) does not apply to a service provider if: (a) the activities of the service provider are covered by the offshore security plan for an offshore facility operator (the covering plan) and the service provider has agreed in writing to the activities being covered by the covering plan; or (b) both of the following apply: (i) the activities of the service provider are covered by a maritime security plan, or a transport security program within the meaning given in the Aviation Transport Security Act 2004; (ii) the service provider has reviewed the plan and, if necessary, amended it to ensure that the provider satisfies the relevant requirements for offshore service providers under these Regulations. > Note: Section 100E of the Act deals with the activities of offshore industry participants being covered by offshore security plans of other offshore industry participants. #### Subdivision 5A.3.2—Matters to be dealt with in plan #### 5A.115 Offshore security plans (Act s 100H) For section 100H of the Act, this Subdivision prescribes the matters that are to be dealt with in an offshore security plan for an offshore service provider. #### 5A.120 Offshore service provider details An offshore security plan for an offshore service provider must be accompanied by a document setting out the following information: (a) the name of the service provider; (b) contact details for the service provider; (c) name of the Chief Executive Officer of the service provider; (d) name of each port or airport: (i) where the service provider has a supply base; or (ii) from which the service provider operates; (e) name or position of the person who is to be the OSPSO for the service provider; (f) the contact details of the OSPSO of the service provider. #### 5A.125 Details of other offshore industry participants An offshore security plan for an offshore service provider must be accompanied by a document setting out the name of, and contact details for: (a) each PSO of a security regulated port and airport security contact officer (within the meaning given in the Aviation Transport Security Act 2004) of a security controlled airport (within the meaning given in that Act): (i) where the service provider has a supply base; or (ii) from which the service provider operates; and (b) each OFSO of a security regulated offshore facility serviced by the service provider. #### 5A.130 Obligation to keep information current (1) An offshore service provider must, within 2 working days after becoming aware of a change in any of the information given under regulation 5A.120 or 5A.125, notify the Secretary, in writing, of the change. Penalty: 20 penalty units. (2) An offence against subregulation (1) is an offence of strict liability. #### 5A.135 Security assessments In addition to the matters required under regulation 5A.05, a security assessment for an offshore service provider must include the following matters: (a) a statement outlining the risk context or threat situation for the offshore service provider; (b) identification and evaluation of important assets, infrastructure and operations that need to be protected; (c) identification of possible risks or threats to assets, infrastructure and operations, and the likelihood and consequences of their occurrence; (d) identification of existing security measures, procedures and operations; (e) identification of weaknesses (including human factors) in the infrastructure, policies and procedures; (f) identification, selection and prioritisation of possible risk treatments (for example, counter‑measures and procedural changes that need to be implemented) and their effectiveness in reducing risk levels and vulnerabilities. #### 5A.140 OSPSO qualifications and responsibilities An offshore security plan for an offshore service provider must set out: (a) the knowledge, skills and other requirements for the OSPSO; and (b) the training or qualifications that satisfy the requirements referred to in paragraph (a); and (c) the training that must be given to the OSPSO. #### 5A.145 Other personnel with security role (1) An offshore security plan for an offshore service provider must identify, by reference to their positions, personnel who have been assigned security duties and responsibilities in addition to those of the OSPSO. (2) The security duties and responsibilities of personnel so identified must be set out in the plan, together with: (a) the knowledge, skills and other requirements for the security‑related aspects of their positions; and (b) the training or qualifications that satisfy the requirements referred to in paragraph (a); and (c) the training that must be given to such personnel. #### 5A.150 Matters that must be in plan (1) An offshore security plan for an offshore service provider must address, in addition to the matters required under regulation 5A.05, the following matters: (a) measures to prevent unauthorised carriage or possession of weapons or prohibited items at a supply base of the service provider or on board vessels or aircraft operated by the service provider; (b) measures to prevent unauthorised access to a supply base of, or a vessel or aircraft operated by, the service provider; (c) procedures for responding to security threats or breaches of security, including procedures for maintaining critical operations of the offshore service provider; (d) procedures for responding to security threats or breaches of security occurring during any interface between a vessel or aircraft and a facility; (e) procedures for responding to any security directions given by the Secretary; (f) procedures for evacuation of a supply base of the service provider in case of security threats or breaches of security; (g) procedures for drills and exercises associated with the plan; (h) procedures for interfacing with the security activities of vessels and offshore facilities serviced by the service provider; (i) procedures for modifying the plan to correct deficiencies or to update the plan to take into account changes to a relevant facility and to the service provider; (j) procedures for reporting occurrences which threaten the security of the offshore facility or the offshore service provider; (k) measures to ensure the security of the information contained in the plan; (l) measures to ensure security of passengers, cargo and cargo handling equipment under the control of the offshore service provider; (m) procedures in case the ship security alert system of a ship is activated while interfacing with the service provider. (2) In determining appropriate measures for paragraph (1)(a) and (b), the service provider must have regard to the special risks or threats associated with the types of vessels and aircraft and the types of cargoes transported by vessels and aircraft serving an offshore facility. #### 5A.155 Consultation An offshore security plan for an offshore service provider must set out, for the purpose of coordinating security‑related activities, a mechanism for consultation between the service provider and: (a) each offshore facility operator serviced by the service provider; and (b) the operator of each security regulated port and each airport from which the service provider operates; and (c) any other stakeholder who may be affected by the implementation of the plan; and (d) the service provider’s employees (or their representatives), regarding security measures and procedures to be implemented. #### 5A.160 Maritime security level 1 An offshore security plan for an offshore service provider must set out, in relation to maritime security level 1: (a) the security measures, identified in the security assessment for the operation, for implementation at that level; and (b) the measures that have been implemented; and (c) a schedule for implementing the measures that have not been implemented; and (d) any interim measures that will be implemented until the measures referred to in paragraph (c) are fully implemented. #### 5A.165 Maritime security levels 2 and 3 An offshore security plan for an offshore service provider must set out, in relation to maritime security levels 2 and 3, the additional security measures that the service provider will implement if the Secretary declares that maritime security level 2 or 3 is in force for a port or airport at which the service provider operates. #### 5A.170 Declarations of security An offshore security plan for an offshore service provider must provide for: (a) the circumstances in which the service provider will request a declaration of security with another offshore industry participant or a ship; and (b) the procedures for negotiating the security measures and responsibilities of the service provider and the participant in those circumstances; and (c) how security measures identified in a declaration will be implemented to ensure compliance by the service provider and the participant with their security plans and with the declaration. #### 5A.175 Protection of plan An offshore service provider must ensure that the offshore security plan for the service provider is protected against unauthorised access, amendment and disclosure. ## Part 6—Maritime security zones ### Division 6.1—Preliminary #### 6.05 Access not to be denied (1) Nothing in this Part has the effect of preventing entry into a maritime security zone by a person who: (a) is accompanied by a law enforcement officer for the purposes of an investigation; or (b) is an Australian Federal Police employee, a member of the Australian Federal Police, or an officer or employee of the police force or service of a State or Territory, who requires access for the purposes of a police investigation; or (c) is otherwise authorised by a law of the Commonwealth, State or Territory to enter the maritime security zone. > Note: Example: For paragraph (c), entry to maritime security zones must not be denied to law enforcement officers, customs officers or AMSA officers if the entry is required in the course of their duties. (2) Nothing in this Part has the effect of preventing a member of the Australian Defence Force who is on duty: (a) from entering a maritime security zone; or (b) from taking into a maritime security zone vessels, vehicles or goods: (i) for the purpose of gaining access to a ship that is under the control, or in the service, of the Australian Defence Force; or (ii) in connection with the movement, loading, unloading, maintenance or provisioning of such a ship. ### Division 6.1A—Control of maritime security zones #### Subdivision 6.1A.1—Preliminary #### 6.07A Purpose of Division 6.1A (1) This Division provides for a scheme under which: (a) an MSIC is issued to identify a person who has been the subject of a background check; and (b) a maritime industry participant must not allow a person to enter, or remain in, a maritime security zone unless the person: (i) is properly displaying a blue MSIC or a temporary MSIC; or (ii) is escorted by a person who is properly displaying a blue MSIC or a temporary MSIC; and (c) an issuing body must not allow a person to be directly involved in the issue of blue MSICs or white MSICs unless the person holds a blue MSIC or a white MSIC. (2) The Division includes requirements about: (a) the display of MSICs; and (b) issuing bodies for MSICs; and (c) the issue of an MSIC to a person; and (d) the expiry, suspension and cancellation of MSICs; and (e) the issuing and display of temporary MSICs. #### 6.07B Definitions for Division 6.1A (1) In this Division: > adverse criminal intelligence assessment has the same meaning as in Part III of the Australian Crime Commission Act 2002. > adverse criminal record, in relation to a person, has the meaning given by subregulation (3). > AFP means the Australian Federal Police established under the Australian Federal Police Act 1979. > ASIO means the Australian Security Intelligence Organisation established under the Australian Security Intelligence Organisation Act 1979. > AusCheck facility means a facility made available by the Secretary AGD for the purposes of the AusCheck scheme. > AusCheck scheme means the scheme prescribed for the purposes of section 8 of the AusCheck Act 2007. > background check, for an individual, means an assessment, under the AusCheck scheme, of information about any of the matters mentioned in section 5 of the AusCheck Act 2007. > blue MSIC means a blue maritime security identification card, in a form approved under subregulation 6.08J(2), issued under this Division. > Category A identification document means: (a) for a person who was born in Australia—either of the following: (i) the person’s Australian birth certificate; (ii) a notice given to the person under section 37 of the Australian Citizenship Act 2007; or (b) for any other person—a valid document that provides evidence of the start of the person’s identity in Australia. > Note: Example 1: An Australian naturalisation certificate. > Note: Example 2: A visa entitling the person to enter Australia. > Note: Example 3: A movement record made available to the person by the Immigration Department. > Category B identification document, for a person, means a current and valid document issued to the person by a Commonwealth, State or Territory Department or agency, or by a government of a foreign country or an agency of a government of a foreign country, that provides photographic proof of the person’s identity and includes the person’s signature. > Note: Example 1: A driver’s licence issued by the Commonwealth, a State or a Territory, or by a foreign government. > Note: Example 2: An Australian or foreign passport. > Category C identification document, for a person, means a current and valid document that provides evidence of the person’s use of identity while operating in the community (which may be a community outside Australia). > Note: Example: A Medicare card, or a membership card issued by a private health insurer. > Category D identification document, for a person, means a valid document that provides evidence of the person’s current residential address (which may be a residential address outside Australia) and is less than 6 months old. > Note: Example: A utilities notice. > Commonwealth authority means: (a) a Commonwealth department; or (b) a body established for a public purpose by or under a law of the Commonwealth. > Comptroller‑General of Customs means the person who is the Comptroller‑General of Customs in accordance with subsection 11(3) or 14(2) of the Australian Border Force Act 2015. > conviction (of a person for an offence) has the meaning given by subsection 85ZM(1) of the Crimes Act 1914, but does not include: (a) a spent conviction (within the meaning given by subsection 85ZM(2) of that Act) if Division 3 of Part VIIC of that Act applies to the person; or (b) a conviction for an offence of which, under a law relating to pardons or quashed convictions, the person is taken never to have been convicted. > Note 1: Under the definition of conviction in subsection 85ZM(1) of the Crimes Act 1914, a person is also taken to have been convicted of an offence if the person has been convicted of the offence but no conviction has been recorded, and if a court has taken the offence into account in sentencing the person for another offence (see paragraphs 85ZM(1)(b) and (c)). > Note 2: Under Part VIIC of the Crimes Act 1914, if a person receives a free and absolute pardon for an offence against a law of the Commonwealth or a Territory because the person was wrongly convicted of the offence, the person is taken for all purposes never to have been convicted (see section 85ZR). > Note 3: In certain circumstances, Division 3 of Part VIIC of the Crimes Act 1914 ceases to apply to a person in relation to a spent conviction if Division 4 (Convictions of further offences) applies. > Note 4: Under the Crimes Act 1914, a person need not disclose convictions that: (a) have been quashed (see section 85ZT); or (b) are spent (see section 85ZV). > Note 5: Convictions for certain offences do not become spent for the purposes of assessing whether to issue the convicted person with an MSIC—see paragraph 85ZZH(k) of the Crimes Act 1914 and Schedule 2 to the Crimes Regulations 2019. > directly involved in the issue of MSICs: a person is directly involved in the issue of MSICs if the person performs any of the following activities: (a) accepting applications for MSICs; (b) applying for background checks under this Division; (ba) receiving documents given to an issuing body in person in accordance with this Division; (c) verifying identification documents for the purposes of this Division; (d) printing or producing MSICs; (e) issuing MSICs, including considering whether criteria for the issue of MSICs are satisfied and whether MSICs are to be issued with conditions; (f) storing equipment associated with the production of MSICs; (g) destroying MSICs that are no longer required, including expired or cancelled MSICs. > exempt person, in relation to a maritime security zone, or a part of a maritime security zone, means a person who under the Act or these Regulations, is not required to properly display a valid MSIC in the zone or that part of the zone. > foreign official means any of the following: (a) a member of the diplomatic staff (including the head) of a diplomatic mission established in Australia; (b) a member of the consular staff (including the head) of a consular post established in Australia; (c) any other member of the staff of such a diplomatic mission or consular post. > holder, of an MSIC or a temporary MSIC, means the person to whom it is issued. > identification document means any of the following: (a) a Category A identification document; (b) a Category B identification document; (c) a Category C identification document; (d) a Category D identification document; (e) any other document used to identify a person for the purposes of this Division. > imprisonment includes periodic detention, home‑based detention and detention until the rising of a court, but does not include an obligation to perform community service. > issuing body means a person or body: (a) that is authorised to issue MSICs; or (b) that is a transitional issuing body. > maritime‑security‑relevant offence means an offence mentioned in an item of a table in Schedule 1 against a law of: (a) the Commonwealth, a State or Territory; or (b) a foreign country or part of a foreign country. > MSIC means a blue MSIC or a white MSIC. > MSIC applicant means a person who has applied for the issue of an MSIC in accordance with regulation 6.08B. > MSIC plan, for an issuing body, means a plan of the kind described in regulation 6.07Q, and includes a plan of that kind as varied under regulation 6.07S or 6.07T. > qualified security assessment has the meaning given by subsection 35(1) of the Australian Security Intelligence Organisation Act 1979. > Secretary AGD means the Secretary who is responsible for administering the AusCheck scheme. > security assessment has the same meaning as in Part IV of the Australian Security Intelligence Organisation Act 1979. > sentence includes a suspended sentence. > temporary MSIC means an identity document issued under regulation 6.08K. > tier 1 offence means a maritime‑security‑relevant offence mentioned in the table in clause 1 of Schedule 1. > tier 2 offence means a maritime‑security‑relevant offence mentioned in the table in clause 2 of Schedule 1. > tier 3 offence means a maritime‑security‑relevant offence mentioned in the table in clause 3 of Schedule 1. > transitional issuing body means a body declared by the Secretary under subregulation 6.07ZB(1) to be a transitional issuing body. > white MSIC means a white maritime security identification card, in a form approved under subregulation 6.08J(3), issued under this Division. (2) For this Division, a person’s security assessment is adverse if there is an adverse security assessment within the meaning of subsection 35(1) of the Australian Security Intelligence Organisation Act 1979 for the person. (3) A person has an adverse criminal record if the person: (a) has been convicted of a tier 1 offence or a tier 2 offence; or (b) has been convicted of, and sentenced to imprisonment for, a tier 3 offence. #### 6.07D Meaning of valid blue MSIC or valid temporary MSIC (1) For this Division, a blue MSIC or a temporary MSIC is valid if: (a) it is issued in accordance with this Division; and (b) it is not expired, suspended or cancelled; and (c) it is not altered or defaced (permanently or temporarily); and (d) the person who shows or displays it is the person to whom it was issued. (3) A temporary MSIC is valid only in the maritime security zone or zones that, under subparagraph 6.08KA(1)(c)(v), the temporary MSIC displays or includes. #### 6.07E Meaning of properly displaying (1) For this Division, a person is properly displaying an MSIC only if: (a) the person is wearing the MSIC as required by this regulation; and (b) the whole of the front of the MSIC is clearly visible at all times that it is being worn. (2) The person must wear the MSIC in 1 of the following ways: (a) attached, at or above the waist, to the front or side of his or her clothing; (b) on a band around his or her upper arm. (3) In this regulation, MSIC means a blue MSIC or a temporary MSIC, but does not include a white MSIC. > Note: A requirement under these Regulations to display a valid MSIC cannot be satisfied with a white MSIC. #### 6.07F Meaning of operational need (1) For the purposes of this Division, a person has an operational need to hold a blue MSIC if his or her occupation or business interests require, or will require, him or her to have unmonitored access to a maritime security zone at least once each year. (2) For the purposes of this Division, a person has an operational need to hold a white MSIC if: (a) the person is required to be directly involved in the issue of MSICs for an issuing body; or (b) the person is an employee of a Commonwealth agency who is required to be directly involved in making decisions relating to the issuing of MSICs; or (c) the person is a foreign official who requires access to a maritime security zone for the purposes of the foreign official’s official duties. #### 6.07H Authentication of certain foreign documents (1) In this regulation: > Hague Convention means the Convention Abolishing the Requirement of Legalisation for Foreign Public Documents, done at the Hague on 5 October 1961. (2) This regulation applies if a person presents to an issuing body, as an identification document, a document that is a public document for the purposes of the Hague Convention and was issued in a country (other than Australia) that is a Contracting State to that Convention. (3) The body may require the person to have the authenticity of the document certified in accordance with that Convention. > Note: The authentication procedure involves the endorsement on, or attachment to, the document of a certificate in a standard form. Details of the procedure and any fee payable should be available from the embassy of the country in which the document was issued. #### 6.07HA Identification documents not in English must be translated (1) This regulation applies if a person gives an issuing body, as an identification document, a document that is not in English. (2) The person must also give the issuing body an original or certified copy of an accurate translation of the document into English. #### Subdivision 6.1A.2—Display of MSICs #### 6.07I Definitions for Subdivision 6.1A.2 In this Subdivision: > escort means a person who escorts, or continuously monitors, another person in a maritime security zone. > Note: Unless exempt, an escort must hold a valid MSIC or valid temporary MSIC: see regulation 6.07J. > visitor, to a maritime security zone, means a person who is entitled to be in the zone because he or she is being escorted or continuously monitored. #### 6.07J Requirement to display MSIC in maritime security zones (1) A person commits an offence if: (a) he or she is in a maritime security zone; and (b) he or she fails to properly display a valid blue MSIC or valid temporary MSIC. Penalty: (c) for a first offence—5 penalty units; or (d) for a second offence within 2 years of an offence—10 penalty units; or (e) for a third or subsequent offence within 2 years of an offence—20 penalty units. (2) Subregulation (1) does not apply to: (a) a visitor to the zone, if his or her escort: (i) is displaying a valid blue MSIC or valid temporary MSIC; or (ii) is carrying a valid blue MSIC but, under regulation 6.07M, is exempt from the requirement to display it; or (iii) is exempt, under regulation 6.07M, from the requirement to carry a valid blue MSIC; or (iv) is a person to whom paragraph (f) applies; or (b) the holder of an identification document issued by an arm of the Defence Force who: (i) is displaying his or her identification document; and (ii) is in the zone as part of his or her duties for the Force; or (c) a person who is in a private living area of a security regulated offshore facility; or (d) a person who, with the permission of the ship’s master, is on board a security regulated ship that is in a water‑side restricted zone; or (e) a person who: (i) is a crew member of a security regulated ship that is in a water‑side restricted zone and docked at a land‑side restricted zone; and (ii) is in the land‑side restricted zone, carrying out his or her duties as a crew member; and (iii) does not enter a maritime security zone other than a zone mentioned in subparagraph (i); or (f) a person who: (i) is a crew member of an offshore facility that is in an offshore security zone; and (ii) is in the offshore security zone, carrying out his or her duties as such a crew member; and (iii) holds a valid blue MSIC; or (g) a person who: (i) is a crew member of a regulated foreign ship, or a foreign ship regulated as an offshore facility, that is in an offshore water‑side zone; and (ii) is in the offshore water‑side zone, carrying out his or her duties as such a crew member; and (iii) is not an Australian citizen and does not hold a visa entitling him or her to work in Australia. > Note: A defendant bears an evidential burden in relation to the matters in subregulation (2): see subsection 13.3(3) of the Criminal Code. (3) A contravention of subregulation (1) is an offence of strict liability. (4) Subregulation (1) does not apply before 1 January 2007. #### 6.07K Person given disqualifying notice not to enter maritime security zone (1) A person who has been given a disqualifying notice by the Secretary, or Secretary AGD, under regulation 6.08D must not enter a maritime security zone. Penalty: 5 penalty units. (2) Subregulation (1) does not apply to a person who is a visitor to a zone for the purpose of boarding or leaving a vessel: (a) as part of a recreational activity; or (b) as a passenger. > Note: A defendant bears an evidential burden in relation to the matter in subsection (2): see subsection 13.3(3) of the Criminal Code. (3) A contravention of subregulation (1) is an offence of strict liability. #### 6.07L Offence—failure to properly escort visitor (1) An escort is guilty of an offence if he or she fails to escort, or continuously monitor, a visitor in accordance with the procedures set out in the maritime security plan, ship security plan or offshore security plan of the maritime industry participant concerned. Penalty: 5 penalty units. (2) A contravention of subregulation (1) is an offence of strict liability. #### 6.07M Persons exempted by Secretary from requirement to hold, carry or display MSIC (1) Despite regulation 6.07J, somebody to whom the Secretary has given an exemption under this regulation need not display an MSIC in a maritime security zone. (2) Within 30 days after receiving an application, the Secretary must: (a) give or refuse the exemption; and (b) notify the person in writing of the decision and, if the decision is a refusal, the reasons for it. (3) On the Secretary’s own initiative, or on written application by a person, the Secretary may give a person, or all persons in a specified class, exemption from the requirement, in 1 or more specified maritime security zones, to: (a) hold an MSIC; or (b) carry an MSIC; or (c) display an MSIC. (4) Before giving or refusing an exemption, the Secretary must consider: (a) why the exemption is necessary; and (b) the likely effect of the proposed exemption on the security of maritime transport or an offshore facility in the zone; and (c) how long the proposed exemption will last, if it is given; and (d) anything else relevant that the Secretary knows about. (5) The Secretary may give an exemption: (a) for a particular period and subject to a condition or conditions mentioned in the exemption; or (b) limited to a particular zone or part of a zone. (6) If the Secretary gives an exemption to all persons in a specified class, the Secretary must publish a notice of the exemption in the Gazette. (7) In this regulation, MSIC means a blue MSIC or a temporary MSIC, but does not include a white MSIC. #### 6.07N Access by emergency personnel (1) Nothing in this Division requires or authorises a maritime industry participant to prevent any of the following having access to any part of a maritime security zone: (a) members of the Defence Force who are responding to an event or threat of unlawful interference with maritime transport or an offshore facility; (b) law enforcement officers or ambulance, rescue or fire service officers who are responding to an emergency. (2) A requirement of this Part to hold, carry or display an MSIC or a temporary MSIC does not apply to a person referred to in paragraph (1)(a) or (b). #### Subdivision 6.1A.3—MSIC issuing bodies #### 6.07P Comptroller‑General of Customs to be issuing body (1) The Comptroller‑General of Customs is an issuing body. (2) The Comptroller‑General of Customs must have an MSIC plan. #### 6.07Q What an MSIC plan is (1) An MSIC plan for an issuing body sets out the procedures to be followed by the issuing body in the performance of its functions under this Division, and the exercise of its powers under this Division. (2) The MSIC plan must include procedures in relation to the following matters: (a) accepting applications for MSICs; (b) applying for background checks under this Division; (c) verifying identification documents for the purposes of this Division; (d) determining whether MSIC applicants have an operational need for an MSIC; (e) printing and producing MSICs; (f) issuing MSICs, including considering whether criteria for the issue of MSICs are satisfied and whether MSICs are to be issued with conditions; (g) distributing MSICs to applicants; (h) ensuring that holders of MSICs are aware of obligations that apply in relation to holding MSICs; (i) storing and transporting MSICs; (j) collecting, storing and destroying information and documents about MSICs and MSIC applications; (k) storing equipment associated with the production of MSICs; (l) taking all reasonable steps to recover blue MSICs that are no longer required, including expired or cancelled blue MSICs; (m) destroying blue MSICs that are no longer required, including expired or cancelled blue MSICs; (n) cancelling access control arrangements that are related to blue MSICs that are no longer required, including expired or cancelled blue MSICs, and blue MSICs that have been lost, stolen or destroyed; (o) keeping records of the activities of the issuing body; (p) if the issuing body proposes to engage other entities to perform activities on its behalf—engaging such other entities to perform such activities; (q) conducting an ongoing quality assurance process of the procedures in the plan and the implementation of the procedures; (r) conducting an annual audit of the procedures in the plan and the implementation of the procedures; (s) the issuing body ceasing to be an issuing body, including procedures to ensure that information about applications for MSICs, and holders of MSICs, is appropriately handled or preserved. (3) The procedures must be such as to ensure that the issuing body performs its functions under this Division, and exercises its powers under this Division, in an appropriately secure manner. (4) The MSIC plan must be accompanied by a document that sets out the following details: (a) the issuing body’s name; (b) the issuing body’s ABN, ACN or ARBN (if any); (c) if the issuing body is a body corporate—the name of its chief executive officer or manager; (d) the issuing body’s postal address; (e) the issuing body’s physical address (if different from the issuing body’s postal address); (f) the issuing body’s email address; (g) the contact telephone number for the issuing body, including an after‑hours number; (h) an alternative contact person and number. (5) An issuing body commits an offence of strict liability if: (a) the issuing body becomes aware of a change in a detail referred to in subregulation (4); and (b) the issuing body does not, within 5 working days after becoming aware of the change, notify the Secretary in writing of the detail as changed. Penalty: 20 penalty units. #### 6.07R Issuing body to give effect to MSIC plan (1) An issuing body must not fail to give effect to its MSIC plan. Penalty: 50 penalty units. (2) Without limiting subregulation (1), an issuing body fails to give effect to its MSIC plan if it: (a) fails to do something that its MSIC plan requires that it do; or (b) does something that its MSIC plan requires that it not do; or (c) does something that its MSIC plan requires that it do, but does so in a way that contravenes the plan. (3) A contravention of subregulation (1) is an offence of strict liability. (4) However, an issuing body may apply, in writing, to the Secretary for exemption from giving effect to its MSIC plan in a particular case or respect. (5) If the Secretary needs more information to deal with an application, the Secretary may ask the applicant, in writing, to provide the information. (6) Within 30 days after receiving an application (or, if the Secretary asks for more information under subregulation (5), within 30 days after receiving the information), the Secretary must: (a) grant or refuse the exemption; and (b) notify the body in writing of the decision and, if the decision is a refusal, the reasons for the decision. > Note: See section 266 of the Administrative Review Tribunal Act 2024 for the requirements for the decision‑maker to notify persons whose interests are affected by the decision of the making of the decision and their right to have the decision reviewed. (7) If the Secretary has not approved, or refused to approve, the exemption within the period allowed by subregulation (6), the Secretary is taken to have refused to approve the exemption. (8) The Secretary may also grant, on his or her own initiative, an issuing body a written exemption from giving effect to its MSIC plan in a particular case or respect. (9) Before granting or refusing an exemption under this regulation, the Secretary must consider: (a) the justification for the proposed exemption; and (b) the likely effect of the proposed exemption on each of the matters mentioned in subregulation 6.07Q(2); and (c) how long the proposed exemption will be for, if it is granted; and (d) anything else relevant that the Secretary knows about. (10) The Secretary may grant an exemption for a particular period and subject to a condition mentioned in the exemption. #### 6.07S Direction to vary MSIC plan (1) If the Secretary is satisfied that an issuing body’s MSIC plan does not adequately address a matter mentioned in subregulation 6.07Q(2), the Secretary may direct the body, in writing, to vary the plan. (2) However, the Secretary must not give a direction under subregulation (1) unless the Secretary is satisfied that the plan, as varied, would adequately address the relevant matter mentioned in subregulation 6.07Q(2). (3) A direction must: (a) indicate the variation needed; and (b) state the time within which the issuing body must submit an appropriately varied plan to the Secretary. (4) An issuing body must comply with such a direction. > Note: Regulation 6.07W provides for the revocation of the authorisation of a body that does not comply with a direction. #### 6.07T Variation of MSIC plan by issuing body (1) An issuing body may: (a) review its MSIC plan at any time; and (b) submit a written proposed variation of the plan to the Secretary for approval. (2) If the Secretary needs more information to deal with a proposed variation, the Secretary may ask the body, in writing, to provide the information. (3) Before the end of 30 days after receiving the proposed variation (or, if the Secretary asks for more information under subregulation (2)), before the end of 30 days after receiving the information), the Secretary must: (a) approve or refuse to approve the variation; and (b) notify the body in writing of the decision and, if the decision is a refusal, the reasons for the decision. > Note: See section 266 of the Administrative Review Tribunal Act 2024 for the requirements for the decision‑maker to notify persons whose interests are affected by the decision of the making of the decision and their right to have the decision reviewed. (4) If the Secretary has not approved, or refused to approve, the variation within the period allowed by subregulation (3), the Secretary is taken to have refused to approve the variation. (5) The Secretary must approve the variation if the plan, as varied, will adequately address the matters mentioned in subregulation 6.07Q(2). #### 6.07U Inspection of issuing bodies’ MSIC plan and records (1) An issuing body must: (a) keep a copy of its MSIC plan or any variation to the plan for at least 7 years after the day on which the plan is approved or varied; and (b) keep any record relating to how the body gives effect to its MSIC plan for at least 7 years after the day on which it is made. (2) An issuing body must allow a maritime security inspector to inspect the plan and records kept for subregulation (1) on request, subject to reasonable notice. #### 6.07V Issuing bodies’ staff (1) An issuing body other than a Commonwealth authority must not allow a person to be directly involved in the issue of MSICs unless he or she holds an MSIC. Penalty: 20 penalty units. (2) A Commonwealth authority that is an issuing body must not allow a person to be directly involved in the issue of MSICs unless he or she holds an MSIC. #### 6.07W Revocation of authorisation for cause (1) The Secretary must revoke an issuing body’s authorisation as an issuing body if, in the opinion of the Secretary: (a) the body’s MSIC plan does not adequately address a matter mentioned in subregulation 6.07Q(2) and it is unlikely that a direction under regulation 6.07S will make the plan adequately address the matter; or (b) allowing the body’s authorisation to continue would be likely to be a significant threat to the security of maritime transport or an offshore facility; or (c) the body does not comply with a direction of the Secretary under regulation 6.07S. (2) The Secretary may revoke the authorisation of an issuing body if the body contravenes: (a) this Division; or (b) a condition of its authorisation; or (c) its MSIC plan. (3) In making a decision under subregulation (2), the Secretary must consider: (a) the kind and seriousness of the contravention; and (b) whether the issuing body has previously contravened this Division, a condition of its authorisation or its MSIC plan. (4) As soon as practicable after revoking the authorisation of a body under this regulation, the Secretary must notify the body in writing of the revocation and the reasons for the revocation. > Note: See section 266 of the Administrative Review Tribunal Act 2024 for the requirements for the decision‑maker to notify persons whose interests are affected by the decision of the making of the decision and their right to have the decision reviewed. (5) The revocation takes effect when written notice of the revocation is given to the body. #### 6.07X Secretary’s discretion to revoke authorisation (1) The Secretary may revoke the authorisation of a body (the relevant body) as an issuing body: (a) on the Secretary’s own initiative; or (b) on application by the relevant body under regulation 6.07Y. (2) If the Secretary intends to revoke the authorisation of the relevant body under this regulation on the Secretary’s own initiative, the Secretary must: (a) give the relevant body written notice of the Secretary’s intention to revoke the authorisation; and (b) invite the relevant body to respond within 14 days. (3) Before deciding whether to revoke the authorisation under this regulation, the Secretary may consider the following matters: (a) the number of MSICs issued by the relevant body that: (i) are in effect; or (ii) are suspended under regulation 6.08LF; or (iii) have been cancelled or have expired, but may be reinstated; or (iv) have been cancelled or have expired, if another MSIC may be issued to the former holder without a further background check being conducted; (b) whether there are any applications for MSICs that the relevant body is yet to approve or refuse to approve; (c) whether the Comptroller‑General of Customs can be the issuing body for: (i) the MSICs issued by the relevant body; and (ii) any applications referred to in paragraph (b); (d) if the Comptroller‑General of Customs cannot be the issuing body as mentioned in paragraph (c)—whether there is another issuing body that can be the issuing body for the things mentioned in subparagraphs (c)(i) and (ii); (e) the effect the revocation of the relevant body’s authorisation may have on operations; (f) if the relevant body has responded to a notice under subregulation (2)—the relevant body’s response; (g) any other matter the Secretary considers relevant. (4) If the Secretary decides to revoke, or refuse to revoke, the relevant body’s authorisation under this regulation, the Secretary must give the body written notice of the following: (a) the Secretary’s decision; (b) the reasons for the decision; (c) if the Secretary decides to revoke the authorisation—the day on which the authorisation is revoked. > Note: If the body applied for the revocation, the Secretary must make the decision and give the body written notice within 30 days of receiving the application—see subregulation 6.07Y(2). (5) If the Secretary decides to revoke the relevant body’s authorisation under this regulation, and there are: (a) MSICs referred to in paragraph (3)(a) issued by the relevant body; or (b) applications for MSICs that the relevant body is yet to approve or refuse to approve; the Secretary must decide, under regulation 6.07ZA, that another issuing body is to be the issuing body for the MSICs and applications. > Note: If there are no MSICs or applications referred to in paragraph (a) or (b), the Secretary may revoke the relevant body’s authorisation without making a decision under regulation 6.07ZA. (6) A revocation of the relevant body’s authorisation under this regulation takes effect at the start of the day specified in the notice in accordance with paragraph (4)(c). #### 6.07Y Application by issuing body for revocation of authorisation (1) An issuing body may apply, in writing, for the Secretary to revoke under regulation 6.07X the authorisation of the body as an issuing body. (2) Within 30 days after receiving the written application, the Secretary must: (a) decide to revoke, or refuse to revoke, the applicant’s authorisation as an issuing body; and (b) give the applicant written notice under subregulation 6.07X(4). > Note: If the Secretary decides to revoke the applicant’s authorisation as an issuing body and there are MSICs or applications referred to in paragraph 6.07X(5)(a) or (b), the Secretary must also make a decision under regulation 6.07ZA. (3) If the Secretary does not make a decision about an application within the 30 days referred to in subregulation (2), the Secretary is taken to have refused to revoke the applicant’s authorisation at the end of that period. #### 6.07ZA Responsibility for MSICs, applications and records if body ceases to be an issuing body (1) This regulation applies in relation to a body (the original issuing body) that was an issuing body if: (a) the Secretary revokes the authorisation of the body as an issuing body under regulation 6.07W or 6.07X; or (b) the body ceases to exist; or (c) for any other reason, the body no longer performs the functions or exercises the powers of an issuing body. (2) The Secretary may decide that another issuing body (the new issuing body) is to be the issuing body for: (a) any MSICs (transferred MSICs) issued by the original issuing body that: (i) are in effect; or (ii) are suspended under regulation 6.08LF; or (iii) have been cancelled or have expired, but may be reinstated; or (iv) have been cancelled or have expired, if another MSIC may be issued to the former holder without a further background check being conducted; and (b) any applications for MSICs (transferred MSIC applications) made to the original issuing body in relation to which the original issuing body: (i) has applied to the Secretary AGD for a background check (whether or not the background check has been completed); but (ii) has not yet issued, or refused to issue, an MSIC. Transferred MSICs and transferred MSIC applications (4) A transferred MSIC is not affected by the original issuing body no longer being an issuing body. (5) The new issuing body is not responsible for the actions of the original issuing body in relation to a transferred MSIC. (6) The new issuing body may continue to deal with a transferred MSIC application as if it had been made to the new issuing body, and if the new issuing body does so: (a) subject to paragraph (b), anything done by or in relation to the original issuing body in relation to the transferred MSIC application is taken, for the purposes of the new issuing body dealing with the application under this Division, to have been done by or in relation to the new issuing body; but (b) the new issuing body may disregard anything done by or in relation to the original issuing body in relation to the transferred MSIC application for the purposes of dealing with the application under this Division, if the new issuing body considers it appropriate to do so. > Note: For example, the new issuing body may continue to process a transferred MSIC application, and may issue the MSIC applied for, in reliance on identification documents provided to the original issuing body. However, the new issuing body may choose not to rely on the documents, and may require the applicant to provide identification documents again, if the new issuing body considers it appropriate to do so. Transfer of records and documents to new issuing body (7) The original issuing body must transfer to the new issuing body: (a) the original issuing body’s register of MSICs, to the extent that the register relates to transferred MSICs; and (b) any records or documents (including records or documents containing AusCheck scheme personal information within the meaning of the AusCheck Act 2007) in the original issuing body’s possession that relate to: (i) transferred MSICs; or (ii) transferred MSIC applications. Transfer of records and documents to Secretary (8) The original issuing body must transfer to the Secretary any records or documents (including records or documents containing AusCheck scheme personal information within the meaning of the AusCheck Act 2007) that subregulation 6.08U(2) requires the original issuing body to retain, other than records or documents transferred to a new issuing body (if any) under subregulation (7) of this regulation. > Note: Subregulation (8) applies whether or not there is a new issuing body. #### 6.07ZB Transitional issuing bodies (1) The Secretary may, in writing, declare an issuing body to be a transitional issuing body. (2) If the Secretary declares an issuing body to be a transitional issuing body, the following apply to the body: (a) beginning on the day after the Secretary makes the declaration, the transitional issuing body: (i) must not issue a new MSIC unless the issuing body received the application for the MSIC before the issuing body was declared to be a transitional issuing body; and (ii) must not apply to the Secretary AGD for a background check, other than under regulation 6.08LBA; (b) the transitional issuing body continues to be the issuing body for any MSICs issued by the issuing body, and may issue replacement MSICs; (c) the transitional issuing body’s authorisation as an issuing body is taken to be revoked immediately after the expiry or cancellation of the last MSIC issued by the body. > Note: A transitional issuing body remains an issuing body (see the definition of issuing body in subregulation 6.07B(1)). Offence (4) A person commits an offence if: (a) the person is a transitional issuing body; and (b) the person issues an MSIC, a card resembling an MSIC, or a card apparently intended to be taken to be an MSIC; and (c) the MSIC or card: (i) is not a replacement MSIC; and (ii) is not a new MSIC that was applied for before the person was declared to be a transitional issuing body. Penalty: 50 penalty units. #### Subdivision 6.1A.4—MSICs: issue, expiry, suspension and cancellation #### 6.08B MSICs—application (1) A person may, in writing, apply to an issuing body for a blue MSIC or a white MSIC. (2) An applicant for a blue MSIC must state in the application whether the person is applying for a blue MSIC that is to be in force for 2 years or 4 years. > Note: A blue MSIC issued to a person on the basis of being a person mentioned in subparagraph 6.08C(1)(c)(iii), or a white MSIC, may be in force for only 2 years: see regulation 6.08I. #### 6.08BA Application for background check An issuing body may apply to the Secretary AGD for a background check on: (a) an applicant for an MSIC; or (b) the holder of an MSIC if the issuing body considers on reasonable grounds that either or both of the following subparagraphs apply in relation to the last application (the previous application) for a background check on the holder made under paragraph (a) or (c): (i) any of the requirements of the AusCheck Regulations 2017 for the previous application were not satisfied; (ii) the Secretary AGD did not have all of the required information (within the meaning of the AusCheck Regulations 2017) for the individual when AusCheck undertook a background check in response to the previous application; or (c) the holder of an MSIC who has notified the issuing body under regulation 6.08LB that the holder has been convicted of and sentenced for a maritime‑security‑relevant offence. #### 6.08BB Requirements for verifying identity (1) This regulation sets out how a person’s identity is to be verified by an issuing body for the purposes of paragraph 6.08C(1)(b). (2) The person must: (a) subject to subregulation (3), give to the issuing body, in person, an original of each of the following for the person: (i) a Category A identification document; (ii) a Category B identification document that is different from the Category A identification document; (iii) a Category C identification document that is different from the Category A identification document and the Category B identification document; (iv) if evidence of residential address is not set out in a document already given—a Category D identification document; and (b) give to the issuing body the information required under the AusCheck Regulations 2017 to be included in an application for a background check in relation to the person. (3) If the Secretary has given an approval under regulation 6.08BC for alternative identification requirements to apply to the person, or a class of persons including the person, in relation to a requirement (the primary requirement) referred to in paragraph (2)(a) of this regulation, the person may satisfy the primary requirement by complying with the alternative identification requirements. (4) The issuing body must verify the person’s identity at the time the person gives the documents referred to in paragraph (2)(a) (or any other documents given in accordance with alternative identification requirements) to the issuing body. (5) To avoid doubt, the person must give the documents referred to in paragraph (2)(a) (or any other documents given in accordance with alternative identification requirements) to the issuing body even if the person has previously given the same documents to the same issuing body in relation to another application for the issue of an MSIC. #### 6.08BC Alternative requirements for verifying identity Alternative identification requirements—persons (1) If a person cannot satisfy one or more requirements to give a document to an issuing body under paragraph 6.08BB(2)(a), the issuing body may apply to the Secretary for approval of alternative identification requirements in relation to those requirements for the person. (2) The application must: (a) be in writing; and (b) state whether the document or documents are one or more of the following: (i) a Category A identification document; (ii) a Category B identification document; (iii) a Category C identification document; (iv) a Category D identification document; and (c) state the reason why the person cannot satisfy the requirement or requirements; and (d) set out alternative identification requirements; and (e) if the alternative identification requirements relate to another document or other documents—include a copy of that document or those documents; and (f) include any other information that may assist the Secretary in making a decision about whether to approve the alternative identification requirements. (3) In making a decision to approve, or refuse to approve, alternative identification requirements, the Secretary must consider the following matters: (a) the extent to which the issuing body can show evidence of the identity of the person; (b) the reason why the person cannot satisfy the requirement or requirements; (c) whether the alternative identification requirements proposed are sufficient to enable the Secretary AGD to conduct a background check. (4) If the Secretary requires further information to consider the application, the Secretary may request the issuing body to give the further information. (5) The Secretary must, in writing and within 30 days after receiving the application or, if further information is requested, within 30 days after receiving the further information: (a) approve, or refuse to approve, the alternative identification requirements for the person; and (b) notify the issuing body of the decision; and (c) if the decision is a refusal—notify the issuing body of the reasons for the refusal. > Note: See section 266 of the Administrative Review Tribunal Act 2024 for the requirements for the decision‑maker to notify persons whose interests are affected by the decision of the making of the decision and their right to have the decision reviewed. (6) If the Secretary has not made a decision on the application within the period mentioned in subregulation (5), the Secretary is taken to have refused to approve the application. Alternative identification requirements—classes of persons (7) If the Secretary is satisfied that a class of persons may be unable to meet one or more requirements under paragraph 6.08BB(2)(a), the Secretary may approve alternative identification requirements in relation to those requirements for the class of persons. #### 6.08C MSICs—issue (1) An issuing body may issue an MSIC to a person if the following criteria are satisfied: (a) the person has an operational need to hold an MSIC; (b) the issuing body is satisfied of the person’s identity, after verifying the person’s identity in accordance with regulation 6.08BB; (c) one of the following applies: (i) the person has shown the issuing body a document that is evidence that he or she is an Australian citizen (for example, the person’s Australian birth certificate or Australian passport or a notice given to the person under section 37 of the Australian Citizenship Act 2007); (ii) the issuing body is satisfied that the person holds a visa entitling him or her to work in Australia; (iii) the issuing body is satisfied that the person is a crew member of a regulated Australian ship that is registered in the Australian International Shipping Register under the Shipping Registration Act 1981; (d) the issuing body has been notified in writing that a security assessment of the person has been made, and: (i) the assessment was not adverse; or (ii) if the assessment was qualified—the issuing body has received a notice from the Secretary that an MSIC may be issued because the person is not a threat to the security of maritime transport or an offshore facility; (da) the issuing body has been notified in writing by the Secretary that the Department has not been given an adverse criminal intelligence assessment that indicates the Chief Executive Officer of the Australian Crime Commission reasonably believes that preventing the person proposed to be issued an MSIC from holding an MSIC is necessary or desirable to prevent the use of maritime transport or an offshore facility in connection with serious and organised crime; (e) the issuing body has been notified in writing that a criminal history check of the person has been made, and: (i) the check shows that the person does not have an adverse criminal record; or (ii) if the check shows that the person has an adverse criminal record—the Secretary has approved an application to issue an MSIC to the person under paragraph 6.08F(3)(a). (2) An issuing body commits an offence if: (a) the issuing body issues an MSIC to a person; and (b) the criteria for the issue of an MSIC mentioned in subregulation (1) are not satisfied. Penalty: 50 penalty units. (3) An offence against subregulation (2) is an offence of strict liability. (4) However, if a person is younger than 18, the issuing body may issue an MSIC to the person if: (a) the person meets the criteria in paragraphs (1)(a), (b), (c), (d) and (da); and (b) in the case of a person who was under 14 at the time the application for the MSIC was made—the application was accompanied by a written consent, given by a parent or guardian of the person, for the issuing body to perform its functions, and exercise its powers, in relation to the issuing of the MSIC (including by applying for a background check of the person). > Note: See paragraph 6.08I(2)(a) for when an MSIC issued under this subregulation ceases to be valid. (5) Despite subregulation (2), the issuing body may issue an MSIC to a person if: (a) the person’s MSIC is cancelled under paragraph 6.08M(1)(f) or (g) or regulation 6.08N; and (b) within 12 months after the cancellation: (i) the person has an operational need to hold an MSIC; and (ii) the person gives an issuing body a statutory declaration stating that, since the cancellation, no relevant circumstance of the person has changed; and (iii) the issuing body lodges a request for the issue of an MSIC using the AusCheck facility; and (c) the person meets the criteria in paragraph (1)(da). (6) An issuing body may issue an MSIC subject to a condition, but must notify the holder in writing what the condition is. (7) An issuing body may issue MSICs only in accordance with its MSIC plan. #### 6.08CA AusCheck facility to be used when issuing MSIC An issuing body issuing an MSIC under regulation 6.08C, 6.08E, 6.08F or 6.08L must use the AusCheck facility. Penalty: 10 penalty units. #### 6.08D Issue of disqualifying notice (1) This regulation applies if: (a) the background check of an applicant for an MSIC reveals that: (i) the person has been convicted of a tier 1 offence; or (ii) the security assessment of the person is adverse and is not a qualified security assessment; or (b) as a result of a background check, the Department is given an adverse criminal intelligence assessment that indicates the Chief Executive Officer of the Australian Crime Commission reasonably believes that preventing an applicant for an MSIC from holding an MSIC is necessary or desirable to prevent the use of maritime transport or an offshore facility in connection with serious and organised crime. > Note: For a person’s notification and review rights in relation to an adverse criminal intelligence assessment, see section 54E and Division 4 of Part III of the Australian Crime Commission Act 2002. (2) The Secretary AGD must send the person a notice in writing (a disqualifying notice) that informs the person about the results of the background check and the effect of regulation 6.07K in relation to the person. (2A) The Secretary AGD must give the Secretary a copy of a notice issued under subregulation (2). (3) If the Secretary thinks it is necessary to do so to prevent unlawful interference with maritime transport or offshore facilities, or to prevent the use of maritime transport or offshore facilities in connection with serious and organised crime, he or she may: (a) direct the issuing body to which the person applied for the issue of an MSIC, in writing, to give the Secretary the following information: (i) the name of the person’s employer; (ii) the kind of business that the employer is engaged in; and (b) give a written notice to the person’s employer, a maritime industry participant or both: (i) stating that, following a background check, a disqualifying notice has been sent to the person; and (ii) stating the information provided by the issuing body following a direction under paragraph (a). #### 6.08E Issue of MSICs to ASIC holders An issuing body may issue an MSIC to a person without verifying that the person has satisfied the criteria set out in subregulation 6.08C(1) if the person: (a) holds an ASIC issued under the Aviation Transport Security Regulations 2005; and (b) has an operational need for the MSIC. > Note: The MSIC expires on the same day as the ASIC: see paragraph 6.08I(2)(c). #### 6.08F MSICs—application to Secretary if person has adverse criminal record (1) If: (a) a person is not eligible to be issued an MSIC only because he or she: (i) has an adverse criminal record; or (ii) has an adverse criminal record, and does not have an operational need for an MSIC; and (b) he or she has not been convicted of a tier 1 offence; an issuing body or the applicant may apply to the Secretary, in writing, for approval to issue an MSIC to the person. > Note: If the person does not have an operational need for an MSIC, an MSIC must not be issued to the person until he or she has an operational need (see subregulation (9)). (2) If the Secretary needs more information to deal with an application, the Secretary may ask the issuing body or applicant, in writing, to provide the information. (3) Within 30 days after receiving an application (or, if the Secretary has asked for information under subregulation (2), after receiving the information), the Secretary must: (a) approve, or refuse to approve, in writing, the issuing of the MSIC; and (b) notify the body, or applicant, in writing of the decision and, if the decision is a refusal, notify the applicant of the reasons for the decision. > Note: See section 266 of the Administrative Review Tribunal Act 2024 for the requirements for the decision‑maker to notify persons whose interests are affected by the decision of the making of the decision and their right to have the decision reviewed. (4) If the Secretary has not approved, or refused to approve, the issue of the MSIC within the period allowed by subregulation (3), the Secretary is taken to have refused to approve the issue of the MSIC. (5) Before approving or refusing to approve the issue of the MSIC to a person who is not eligible to be issued an MSIC only because the person’s criminal record prevents him or her being issued with an MSIC, the Secretary must decide whether the person constitutes a threat to the security of maritime transport or an offshore facility by considering: (a) the nature of the offence the person was convicted of; and (ab) if the person was convicted of the offence before becoming the holder of an MSIC; and (b) the length of the term of imprisonment imposed on him or her; and (c) if he or she has served the term, or part of the term—how long it is, and his or her conduct and employment history, since he or she did so; and (d) if the whole of the sentence was suspended—how long the sentence is, and his or her conduct and employment history, since the sentence was imposed; and (e) anything else relevant that the Secretary knows about. (6) The Secretary may give an approval subject to a condition, but must notify the issuing body in writing what the condition is. (7) Subregulation (8) applies if the Secretary, under paragraph (3)(b), notifies the body or applicant that he or she has refused to approve the issuing of an MSIC. (8) If the Secretary thinks it is necessary to do so to prevent unlawful interference with maritime transport or offshore facilities, or to prevent the use of maritime transport or offshore facilities in connection with serious and organised crime, he or she may: (a) direct the issuing body to which the person applied for the issue of an MSIC, in writing, to give the Secretary the following information: (i) the name of the person’s employer; (ii) the kind of business that the employer is engaged in; and (b) give a written notice to the person’s employer, a maritime industry participant or both: (i) stating that, following a background check, the Secretary has refused to approve the issue of an MSIC to the person; and (ii) stating the information provided by the issuing body following a direction under paragraph (a). Applicant who does not have an operational need (9) If the Secretary approves the issue of an MSIC to a person who does not have an operational need for the MSIC, the MSIC must not be issued until the person has an operational need for the MSIC. #### 6.08H Persons the subject of qualified security assessments (1) If a security assessment of a person who applied to an issuing body for the issue of an MSIC is a qualified security assessment, the Secretary must: (a) if the Secretary is satisfied that the holding of an MSIC by the person would not constitute a threat to the security of maritime transport or an offshore facility—give the issuing body a written notice stating that an MSIC may be issued because the person is not a threat to the security of maritime transport or an offshore facility; or (b) if the Secretary is satisfied that the holding of an MSIC by the person would constitute a threat to the security of maritime transport or an offshore facility—give the issuing body a written direction not to issue the MSIC to the person. > Note: For a person’s notification and review rights in relation to a qualified security assessment, see section 38 and Division 4 of Part IV of the Australian Security Intelligence Organisation Act 1979. (2) The Secretary must give the person a notice stating that the Secretary has given the issuing body a notice under paragraph (1)(a) or a direction under paragraph (1)(b). (3) An issuing body must not issue an MSIC to a person in contravention of a direction under paragraph (1)(b). Penalty: 20 penalty units. #### 6.08HA Provision of information to Secretary AGD If the Secretary makes a decision under regulation 6.08F, 6.08H, 6.08MB, 6.08MC or 6.08X, the Secretary must tell the Secretary AGD about the decision. #### 6.08I MSICs—period of issue and expiry (1) Unless earlier cancelled, an MSIC expires: (a) if the holder applied for a white MSIC, or a blue MSIC that is to be in force for 2 years—2 years after the last day of the month in which the background check, undertaken when the holder applied for the MSIC, was completed; or (b) if the holder applied for a blue MSIC that is to be in force for 4 years—4 years after the last day of the month in which the background check, undertaken when the holder applied for the MSIC, was completed. (2) However: (a) an MSIC issued to a person under 18 in reliance on subregulation 6.08C(4) must expire no later than the earlier of: (i) 6 months after the person’s 18th birthday; and (ii) 2 years after the last day of the month in which the background check, undertaken when the person applied for the MSIC, was completed; and (b) an MSIC issued to a person who is entitled to remain in Australia because he or she holds a visa must expire no later than the day on which the person’s visa expires; and (c) an MSIC issued under regulation 6.08E must expire on the same day as the ASIC mentioned in paragraph 6.08E(a); and (d) an MSIC issued to a person on the basis of being a person mentioned in subparagraph 6.08C(1)(c)(iii) must expire no later than 2 years after the last day of the month in which the background check, undertaken when the person applied for the MSIC, was completed; and (e) an MSIC issued under regulation 6.08L expires in accordance with subregulation 6.08L(3). (3) If an MSIC is suspended under regulation 6.08LF, the MSIC expires on the date it would have expired if it had not been suspended. (4) If an MSIC is cancelled and the cancellation is set aside (however described) by the Secretary or the Administrative Review Tribunal, the MSIC expires on the earlier of: (a) the date it would have expired if it had not been cancelled; or (b) if a condition imposed under subregulation 6.08MD(1) sets an earlier expiry date—that date. #### 6.08J Form of blue MSICs and white MSICs Form of blue MSIC (2) A blue MSIC issued by an issuing body must be in a form approved in writing by the Secretary for the issuing body. Form of white MSIC (3) A white MSIC issued by an issuing body must be in a form approved in writing by the Secretary for the issuing body. General (4) Without limiting subregulation (2) or (3), the approval of a form under subregulation (2) or (3) may extend to specifying any or all of the following: (a) the dimensions of an MSIC and each of its parts; (b) the information that must be included on the front or the back of an MSIC; (c) the security features that must be incorporated into an MSIC; (d) the kind of photograph of the holder of an MSIC that must be included on the MSIC, including the size and quality of the photograph. (4A) The Secretary may approve a form of an MSIC for an issuing body under this regulation only if the Secretary is reasonably satisfied that it is necessary to do so for the purposes of safeguarding against unlawful interference with maritime transport or offshore facilities. (5) The Secretary may approve the issue of an MSIC showing the holder’s name on the back if the Secretary is satisfied that having the holder’s name on the front would put the holder’s personal security at risk. (6) A person commits an offence if: (a) the person is an issuing body; and (b) the Secretary gives the person a copy of a form approved for the issuing body under this regulation for a blue MSIC or a white MSIC; and (c) the person issues a blue MSIC or a white MSIC; and (d) the MSIC issued does not comply in a particular respect with the form approved for the issuing body for that kind of MSIC; and (e) the respect in which the form does not comply is not the subject of an approval under subregulation (5). Penalty: 50 penalty units. (7) An offence under subregulation (6) is an offence of strict liability. > Note 1: For strict liability, see section 6.1 of the Criminal Code. > Note 2: National Privacy Principle 7, set out in Schedule 3 to the Privacy Act 1988, restricts the uses to which an identifier of an individual can be put. #### 6.08JA Issuing body to be given copy of approved form of MSIC (1) The Secretary must, as soon as practicable after approving a form of an MSIC for an issuing body under regulation 6.08J, give a copy of the approved form to the issuing body. (2) The Secretary may, in the copy of the approved form given to the issuing body, direct that the issuing body must not disclose the details of the approved form to another person except in the circumstances specified in the direction. (3) A person commits an offence if: (a) the person is an issuing body; and (b) the Secretary, under subregulation (1), gives the issuing body a copy of a form approved for the issuing body; and (c) the copy of the approved form contains a direction under subregulation (2); and (d) the issuing body contravenes the direction. Penalty: 50 penalty units. (4) An offence under subregulation (3) is an offence of strict liability. > Note: For strict liability, see section 6.1 of the Criminal Code. #### 6.08JB Issuing body may disclose details of approved form to other persons (1) An issuing body may, in the circumstances specified in a direction in a copy of an approved form given to the issuing body under regulation 6.08JA, disclose the details of the approved form to another person. (2) A person commits an offence if: (a) an issuing body discloses the details of an approved form to the person in in accordance with subregulation (1); and (b) the person discloses the details to another person without the written approval of the Secretary. Penalty: 50 penalty units. (3) An offence under subregulation (2) is an offence of strict liability. > Note: For strict liability, see section 6.1 of the Criminal Code. #### 6.08K Temporary MSICs (1) A temporary MSIC may be issued to a person by a maritime industry participant if: (a) either: (i) the person is the holder of a blue MSIC and has forgotten the MSIC, or it has been lost, stolen or destroyed; or (iii) subregulation (2A) applies to the person; and (b) the participant is shown a document that provides evidence of the identity of the person; and (c) the participant’s maritime security plan, ship security plan or offshore security plan provides for the participant to: (i) issue temporary MSICs; and (ii) create, and keep for auditing purposes, a register of those temporary MSICs; and (d) the participant acts in accordance with its security plan. (2A) This subregulation applies to a person if: (a) the person’s application for the issue of a blue MSIC has been approved by the issuing body; and (b) he or she has not yet received the MSIC. (3) A temporary MSIC expires on the day specified by the participant. (6) If the participant issues a temporary MSIC to a person to whom subregulation (2A) applies, the temporary MSIC will expire on the earliest of the following: (a) the beginning of the day 2 months after the day when the temporary MSIC is issued; (b) the day the MSIC holder receives his or her blue MSIC. #### 6.08KA Form of temporary MSICs (1) Subject to subregulation (3), a temporary MSIC must comply with the following requirements: (a) it must be orange in colour and no smaller than 54 mm wide by 86 mm high; (b) it must have a black capital letter ‘T’ in Arial of at least 125 point on the front; (c) it must display, or include, the following information: (i) the holder’s name as it appears on the holder’s blue MSIC; (ii) the unique identifying number that appears on the holder’s blue MSIC; (iii) a description of the document that provided evidence of the identity of the holder; (iv) the name of the maritime industry participant that issued the temporary MSIC; (v) a description of the maritime security zone or zones in which the blue MSIC is valid; (vi) the expiry date of the temporary MSIC. (2) For paragraph (1)(c), information may be included on a temporary MSIC by: (a) writing it by hand; or (b) using a printing process; or (c) encoding it magnetically, or in another way. (3) The Secretary may approve, in writing, the issue of a temporary MSIC that does not comply with subregulation (1) or (2). #### 6.08L Issue of replacement MSICs (1) An issuing body may issue a replacement MSIC (the replacement MSIC) to the holder of another MSIC (the old MSIC) issued by the issuing body if: (a) any of the following apply: (i) the old MSIC has been lost or destroyed, and the holder has given the issuing body a statutory declaration setting out the circumstances of the loss or destruction (which may be in the same document as the declaration referred to in paragraph (d)); (ii) the old MSIC has been stolen, and the holder has given the issuing body a copy of a police report, or other information issued by the police, regarding the theft; (iii) the holder’s name has changed, and the holder has notified the issuing body of the change in accordance with regulation 6.08LCA; (iv) the holder wishes to replace the old MSIC with the replacement MSIC because the holder has an operational need for the replacement MSIC; and (b) the holder has an operational need for the replacement MSIC; and (c) in a case where the replacement MSIC is a different kind of MSIC from the old MSIC—the holder has given the issuing body evidence of the holder’s operational need for the replacement MSIC; and (d) the holder has given the issuing body a statutory declaration stating that, since his or her background checks were completed, he or she has not been convicted of a maritime‑security‑relevant offence. Issue of replacement MSIC (2) The replacement MSIC may be a blue MSIC or a white MSIC. > Note: The holder must have an operational need for the replacement MSIC (see paragraph (1)(b)). (3) The replacement MSIC expires: (a) if the replacement MSIC is a blue MSIC—at the same time as the old MSIC would have expired; and (b) if the replacement MSIC is a white MSIC—at the earlier of the following times: (i) the same time as the old MSIC would have expired; (ii) 2 years after the last day of the month in which the background check, undertaken when the holder applied for the old MSIC, was completed. (4) The replacement MSIC is subject to: (a) any conditions to which the old MSIC was subject; and (b) any conditions which the issuing body imposes on the replacement MSIC by written notice given to the holder of the replacement MSIC. (5) The number of the replacement MSIC must be unique among MSICs issued by the issuing body. (6) Either: (a) the replacement MSIC must bear a number indicating how many times a permanent MSIC has been issued to the person with the same expiry date; or (b) the issuing body must keep a record of how many times it has issued a permanent MSIC to the person with that expiry date. (7) The issue of a replacement MSIC to a person under this regulation cancels any temporary MSIC the person holds under regulation 6.08K. #### 6.08LA Special arrangements for persons with visa extensions An issuing body may issue an MSIC to a person, if the person: (a) was the holder of an MSIC (the old MSIC) that expired because the person’s visa (the old visa) has expired; and (b) holds a new visa entitling him or her to work in Australia, that was issued less than 12 months after the expiry of the old visa; and (c) has an operational need to hold the MSIC that the issuing body proposes to issue; and (d) gives the issuing body a statutory declaration stating that, since the expiry of the old visa, none of the information given in relation to the application for the old MSIC has changed. #### 6.08LB Obligation of applicants for, and holders of, MSICs—conviction of maritime‑security‑relevant offence (1) Subregulation (2) applies if a person who is an applicant for, or the holder of, an MSIC is: (a) convicted of and sentenced for a tier 1 offence or tier 2 offence; or (b) convicted of, and sentenced to imprisonment for, a tier 3 offence. (2) Within 7 days after being sentenced, the person must notify the issuing body or the Secretary in writing of the following matters: (a) his or her name, date of birth and residential address; (b) if he or she holds one or more MSICs—the unique number of each MSIC held; (c) the date he or she was convicted and sentenced; (d) the court in which he or she was convicted; (e) whether he or she gives consent for: (i) his or her identity to be confirmed; and (ii) new background checks to be undertaken; and (iii) the outcome of the background checks to be provided to the issuing body, if the outcome will adversely affect his or her ability to hold an MSIC or to continue holding the MSIC. Penalty: 20 penalty units. > Note: For the meaning of maritime‑security‑relevant offence, see regulation 6.07B. (3) The issuing body or the Secretary may, if not satisfied that all of the information mentioned in subregulation (2) has been provided, request that the person provide that information within 14 days. (4) For paragraph (2)(e), consent is given if the person gives consent and any information requested to confirm his or her identity to: (a) if the person notified the issuing body under subregulation (1)—the issuing body; or (b) if the person notified the Secretary under subregulation (1)—the Secretary. (5) The Secretary must tell the issuing body if the person: (a) notifies the Secretary under subregulation (2); and (b) does not: (i) give his or her consent under paragraph (2)(e); or (ii) comply with: (A) all of the requirements of subregulation (2); and (B) any request under subregulation (3) within 14 days after the request. #### 6.08LBA Obligation on issuing body notified under regulation 6.08LB An issuing body for an MSIC commits an offence if: (a) a person who is an applicant for, or the holder of, an MSIC notifies the issuing body of the matters mentioned in subregulation 6.08LB(2); and (b) the issuing body fails to apply to the Secretary AGD for a background check on the person within 2 working days after the person: (i) notifies of his or her consent under paragraph 6.08LB(2)(e); or (ii) if any information is requested under subregulation 6.08LB(3)—provides that information. Penalty: 100 penalty units. #### 6.08LC Application by Secretary for background check on applicant for, or holder of, MSIC (1) The Secretary may apply to the Secretary AGD for a background check on a person who is an applicant for, or the holder of, an MSIC if the Secretary considers on reasonable grounds that: (a) the person has been convicted of a maritime‑security‑relevant offence; or (b) the person constitutes a threat to maritime transport or offshore facility security; or (c) there is a risk that the person would use maritime transport or an offshore facility in connection with serious and organised crime. (2) In considering the matter mentioned in paragraph (1)(a), (b) or (c), the Secretary must take into account: (a) any information provided to the Secretary by the person or the issuing body for the MSIC; and (b) any information provided to the Secretary by the Secretary AGD or a law enforcement agency (however described) about the person; and (c) anything else relevant that the Secretary knows about. #### 6.08LCA Obligation of applicants for, and holders of, MSICs—change of name (1) A person commits an offence of strict liability if: (a) the person is an applicant for, or a holder of, an MSIC; and (b) the person changes his or her name; and (c) the person does not notify the issuing body to which the application was made or which issued the MSIC (as the case requires) of the change, in accordance with subregulation (2), within 30 days after the change. Penalty: 5 penalty units. (2) The person must: (a) notify the issuing body in person; and (b) at the same time, give the issuing body an original of a current and valid document, showing the new name, which was issued to the person by a Commonwealth, State or Territory Department or agency. (3) The issuing body must notify AusCheck of the change of name, using the AusCheck facility, within 7 days. > Note: For the issuing of a replacement MSIC to an MSIC holder who changes his or her name, see regulation 6.08L. #### 6.08LD Obligation of MSIC holders issued with cards for more than 2 years—change of address (1) A holder of an MSIC commits an offence if: (a) the holder’s MSIC was issued for more than 2 years; and (b) the holder’s residential address has changed since the holder applied for the MSIC; and (c) the holder fails to notify, in writing, the issuing body that issued the MSIC of all the changes to the holder’s residential address since the holder applied for the MSIC; and (d) the notification is not made by the time mentioned in subregulation (3). Penalty: 5 penalty units. (3) For paragraph (1)(d), the time is no later than 2 years and 30 days before the day of expiry mentioned on the front of the holder’s MSIC. #### 6.08LDA Obligation of issuing bodies—notification of change of address An issuing body for an MSIC commits an offence if: (a) the holder of an MSIC notifies the issuing body of the change of his or her residential address in accordance with regulation 6.08LD; and (b) the issuing body fails, within 7 days of being notified of the change, to update the AusCheck facility with the changed address. Penalty: 50 penalty units. #### 6.08LE Suspension of MSICs—Secretary’s direction (1) The Secretary may, in writing, direct an issuing body to suspend an MSIC if: (a) the holder of the MSIC has been convicted of a maritime‑security‑relevant offence, but has not yet been sentenced for the offence; and (b) the Secretary reasonably considers that either: (i) the holder of the MSIC constitutes a threat to the security of maritime transport or an offshore facility; or (ii) there is a risk that the holder of the MSIC may use maritime transport or an offshore facility in connection with serious and organised crime. (2) In considering whether subparagraph (1)(b)(i) or (ii) applies, the Secretary must consider: (a) the type of offence the holder was convicted of and the circumstances in which the offence was committed; and (b) the effect the suspension may have on the holder’s employment; and (c) if the holder is employed in a maritime security zone—the location of the maritime security zone; and (d) whether the holder is employed in a port security zone, ship security zone, on‑board security zone or offshore security zone, and the type of area in which the holder is employed; and (e) anything else relevant that the Secretary knows about. (3) If the Secretary makes a direction under subregulation (1), the Secretary must tell the Secretary AGD, in writing, about the direction. #### 6.08LF Suspension of MSICs by issuing body (1) An issuing body must immediately suspend an MSIC issued by the body if directed to do so by the Secretary. (2) As soon as practicable after the issuing body suspends the MSIC, the body must tell the holder of the MSIC, in writing, that the MSIC has been suspended and the reasons for the suspension. > Note: See section 266 of the Administrative Review Tribunal Act 2024 for the requirements for the decision‑maker to notify persons whose interests are affected by the decision of the making of the decision and their right to have the decision reviewed. (3) The suspension takes effect when the holder is told about the suspension. (4) The holder of a blue MSIC that is suspended under this regulation must return the MSIC to the issuing body for the MSIC not later than 7 days after the day the holder is told in writing that the MSIC has been suspended. Penalty: 10 penalty units. (5) An offence against subregulation (4) is an offence of strict liability. #### 6.08LG Period of suspension of MSIC (1) Unless subregulation (2) applies, the suspension of an MSIC continues until the MSIC is cancelled or expires. (2) If: (a) the Secretary notifies the issuing body that issued the MSIC of the outcome of a background check of the holder of the MSIC; and (b) the issuing body is not required under regulation 6.08M to cancel the MSIC; the suspension of the MSIC ends on the day after the issuing body is notified. > Note: Provisions relating to the conduct of a background check when the holder of an MSIC has been convicted of a maritime‑security‑relevant offence include regulations 6.08BA and 6.08LB of these Regulations, and section 8 of the AusCheck Regulations 2017. #### 6.08LH Suspension of temporary MSIC (1) This regulation applies if a person holds: (a) an MSIC that is suspended; and (b) a temporary MSIC. (2) The temporary MSIC is suspended: (a) when the MSIC is suspended; and (b) for the period the MSIC is suspended. #### 6.08LI Report to Secretary of suspension of MSIC (1) If an issuing body suspends an MSIC, the body must, not later than 7 days after the day the MSIC is suspended, tell the Secretary, in writing: (a) about the suspension; and (b) the name, date of birth and residential address of the holder of the MSIC. > Note: An issuing body may suspend an MSIC only when directed by the Secretary—see subregulation 6.08LF(1). (2) The Secretary may tell the holder’s employer, or a maritime industry participant, that the MSIC has been suspended if the Secretary considers on reasonable grounds that doing so may help to prevent unlawful interference with maritime transport or offshore facilities. #### 6.08M Cancellation of MSICs (1) An issuing body must immediately cancel an MSIC issued by the body if: (a) the body finds out that the MSIC was not issued in accordance with the body’s MSIC plan; or (b) the Secretary finds out that the MSIC was not issued in accordance with the body’s MSIC plan and notifies the issuing body in writing; or (c) the Secretary has notified the issuing body in writing that a security assessment of the holder was adverse; or (ca) the Secretary has told the issuing body in writing that the holder has received a qualified security assessment; or (cb) the Secretary has notified the issuing body in writing that the Department has been given an adverse criminal intelligence assessment that indicates the Chief Executive Officer of the Australian Crime Commission reasonably believes that preventing the holder from holding an MSIC is necessary or desirable to prevent the use of maritime transport or an offshore facility in connection with serious and organised crime; or (d) the body finds out that the holder is not entitled to work in Australia, and the holder is not a person mentioned in subparagraph 6.08C(1)(c)(iii); or (e) subject to subregulation (1A), the issuing body has received a notice from the Secretary that the holder has an adverse criminal record; or (ea) the Secretary advises the issuing body that a background check of the holder has been cancelled under section 11A of the AusCheck Regulations 2017; or (eb) the holder of an MSIC that is issued for more than 2 years withdraws consent for a background check before an application for the check is taken to be made under subsection 10(2) of the AusCheck Regulations 2017; or (ec) both of the following apply: (i) an application for a background check of the holder is made under regulation 6.08BA or 6.08LC of these Regulations or subsection 9(2), 10(2) or 16A(3) of the AusCheck Regulations 2017; (ii) the Secretary AGD advises the issuing body under section 15A of the AusCheck Regulations 2017 that the background check is cancelled; or (f) the holder no longer has an operational need to hold the MSIC; or (g) the body finds out that, for a continuous period of 12 months, the holder has not had an operational need to hold the MSIC; or (h) the holder: (i) notifies the Secretary or the issuing body under regulation 6.08LB that the holder has been convicted of and sentenced for a maritime‑security‑relevant offence; and (ii) does not consent to a background check or does not comply with subregulation 6.08LB(2) and, if requested, subregulation 6.08LB(3); or (i) the issuing body finds out that the MSIC has been lost, stolen or destroyed; or (j) the issuing body issues a replacement MSIC under regulation 6.08L for a reason referred to in subparagraph 6.08L(1)(a)(iii) (change of name) or 6.08L(1)(a)(iv) (operational need for replacement MSIC); or (k) the issuing body finds out that the holder has changed his or her name, and the holder has not asked the issuing body to issue a replacement MSIC under regulation 6.08L. (1A) An issuing body must not cancel an MSIC that was: (a) issued with the approval of the Secretary under regulation 6.08F; or (b) reinstated under regulation 6.08MC; if: (c) the notice that the holder has an adverse criminal record relates to an application for a new MSIC; or (d) the Secretary advises the issuing body that there has been no material change in the holder’s criminal history. (2) As soon as practicable after an issuing body cancels an MSIC under subregulation (1), the body must notify the holder, in writing, that the MSIC has been cancelled and the reasons for the cancellation. > Note: See section 266 of the Administrative Review Tribunal Act 2024 for the requirements for the decision‑maker to notify persons whose interests are affected by the decision of the making of the decision and their right to have the decision reviewed. (2A) An issuing body commits an offence if: (a) the issuing body is required to cancel an MSIC under paragraph (1)(c), (ca), (cb), (e), (ea) or (eb); and (b) the issuing body fails to immediately cancel the MSIC. Penalty: 50 penalty units. (2B) An issuing body commits an offence if: (a) the issuing body cancels an MSIC under paragraph (1)(c), (ca), (cb), (e), (ea) or (eb); and (b) the issuing body fails to tell the holder of the MSIC, in writing, as soon as practicable after the day the MSIC is cancelled, that the MSIC has been cancelled and the reasons for the cancellation. Penalty: 50 penalty units. (3) A cancellation under subregulation (1) takes effect when the holder is notified of it in writing. (4) Any temporary MSIC issued to the holder is cancelled if the holder’s MSIC is cancelled. (5) The cancellation of the temporary MSIC takes effect at the time the cancellation of the MSIC takes effect. #### 6.08MA Reinstatement of cancelled MSIC—application (1) This regulation applies if an MSIC is cancelled by an issuing body under paragraph 6.08M(1)(ca) or (e). (2) The former holder of the MSIC or the issuing body may apply to the Secretary, in writing, for the cancellation to be set aside. (3) The application must be made not later than 28 days after the day the former holder of the MSIC is told about the cancellation. (4) If the Secretary needs more information to deal with an application, the Secretary may ask the former holder of the MSIC or the issuing body, in writing, to provide the information. #### 6.08MB Reinstatement of MSIC cancelled for qualified security assessment—Secretary’s decision (1) This regulation applies if: (a) an MSIC is cancelled under paragraph 6.08M(1)(ca); and (b) the Secretary receives: (i) an application mentioned in subregulation 6.08MA(2) from the applicant; or (ii) if the Secretary asks the former holder of the MSIC or the issuing body for the MSIC for information under subregulation 6.08MA(4)—the information. (2) If the Secretary is satisfied on reasonable grounds that setting aside the cancellation of the MSIC would not constitute a threat to the security of maritime transport or an offshore facility, the Secretary must set aside the cancellation. (3) If the Secretary is satisfied on reasonable grounds that setting aside the cancellation of the MSIC would constitute a threat to the security of maritime transport or an offshore facility, the Secretary must refuse to set aside the cancellation. (4) Within 30 days after the day the Secretary receives the application or, if subparagraph (1)(b)(ii) applies, within 30 days after the day the Secretary receives the information, the Secretary must: (a) decide whether to set aside the cancellation of the MSIC; and (b) if the Secretary decides to set aside the cancellation—tell the following persons, in writing, about the decision and any conditions under regulation 6.08MD to which the setting aside is subject: (i) the applicant; (ii) the Secretary AGD; (iii) if the applicant is the former holder of the MSIC—the issuing body; (iv) if the applicant is the issuing body—the former holder of the MSIC; and (c) if the Secretary refuses to set aside the cancellation: (i) tell the former holder of the MSIC, in writing, about the decision and the reasons for it; and (ii) if the applicant is the issuing body—tell the issuing body, in writing, about the decision. > Note 1: See section 266 of the Administrative Review Tribunal Act 2024 for the requirements for the decision‑maker to notify persons whose interests are affected by the decision of the making of the decision and their right to have the decision reviewed. > Note 2: For a person’s notification and review rights in relation to a qualified security assessment, see section 38 and Division 4 of Part IV of the Australian Security Intelligence Organisation Act 1979. (5) If the Secretary does not make a decision mentioned in paragraph (4)(a) within the period mentioned in subregulation (4), the Secretary is taken to have refused to set aside the cancellation of the MSIC. (6) In this regulation: > applicant, for a cancelled MSIC, means the person who made the application under subregulation 6.08MA(2) for the cancellation to be set aside. #### 6.08MC Reinstatement of MSIC cancelled for adverse criminal record—Secretary’s decision (1) This regulation applies if: (a) an MSIC is cancelled under paragraph 6.08M(1)(e); and (b) the Secretary receives: (i) an application mentioned in subregulation 6.08MA(2) from the applicant; or (ii) if the Secretary asks the former holder of the MSIC or the issuing body for the MSIC for information under subregulation 6.08MA(4)—the information. (2) Within 30 days after the day the Secretary receives the application or, if subparagraph (1)(b)(ii) applies, within 30 days after the day the Secretary receives the information, the Secretary must: (a) decide whether to set aside the cancellation of the MSIC; and (b) if the Secretary decides to set aside the cancellation—tell the following persons, in writing, about the decision and any conditions under regulation 6.08MD to which the setting aside is subject: (i) the applicant; (ii) the Secretary AGD; (iii) if the applicant is the former holder of the MSIC—the issuing body; (iv) if the applicant is the issuing body—the former holder of the MSIC; and (c) if the Secretary refuses to set aside the cancellation: (i) tell the former holder of the MSIC, in writing, about the decision and the reasons for it; and (ii) if the applicant is the issuing body—tell the issuing body, in writing, about the decision. > Note: See section 266 of the Administrative Review Tribunal Act 2024 for the requirements for the decision‑maker to notify persons whose interests are affected by the decision of the making of the decision and their right to have the decision reviewed. (3) If the Secretary does not make a decision mentioned in paragraph (2)(a) within the period mentioned in subregulation (2), the Secretary is taken to have refused to set aside the cancellation of the MSIC. (4) Before making a decision mentioned in paragraph (2)(a), the Secretary must decide whether the former holder constitutes a threat to the security of maritime transport or an offshore facility by considering: (a) the type and length of the term of imprisonment imposed on the former holder; and (b) if the former holder has served the term, or part of the term—how long it is, and the former holder’s conduct, since the term was served; and (c) whether the former holder was convicted of the offence before becoming the holder of an MSIC; and (d) the effect on the holder’s employment if the MSIC is cancelled; and (e) the location of the maritime security zone where the holder is employed; and (f) whether the holder is employed in a port security zone, ship security zone, on‑board security zone or offshore security zone and the type of area in which the holder is employed; and (g) anything else relevant that the Secretary knows about. (5) In this regulation: > applicant, for a cancelled MSIC, means the person who made the application under subregulation 6.08MA(2) for the cancellation to be set aside. #### 6.08MD Reinstatement of MSIC subject to condition (1) The Secretary may set aside a cancellation mentioned in regulation 6.08MB or 6.08MC subject to a condition. > Note: Example: A condition that background checking is conducted at stated intervals. (2) If the former holder of the MSIC applied for the cancellation to be set aside, and the Secretary sets the cancellation aside subject to a condition, the Secretary must tell the issuing body for the MSIC, in writing, about the condition. (3) If the issuing body for the MSIC applied for the cancellation to be set aside, and the Secretary sets the cancellation aside subject to a condition, the Secretary must tell the former holder of the MSIC, in writing, about the condition. #### 6.08N Cancellation of MSICs at holder’s request (1) An issuing body must cancel an MSIC issued by the body if the holder of the MSIC asks the body to cancel it. (2) The cancellation of a blue MSIC under subregulation (1) takes effect when the MSIC is returned to the issuing body. (3) The cancellation of a white MSIC under subregulation (1) takes effect when the issuing body receives the request. #### 6.08O Report to Secretary of cancellation of MSIC (1) If an issuing body cancels an MSIC, the body must, within 7 days after the cancellation, notify the Secretary in writing: (a) the holder’s name, address and date of birth; and (b) the reason for the cancellation. (2) If the cancellation is for a reason mentioned in a paragraph of subregulation 6.08M(1), the Secretary may notify the employer of the former holder of the MSIC, or a maritime industry participant, that the MSIC has been cancelled. (3) The Secretary may act under subregulation (2) only if he or she thinks that doing so may help to prevent unlawful interference with maritime transport or offshore facilities, or the use of maritime transport or offshore facilities in connection with serious and organised crime. #### 6.08P Return of blue MSICs that have expired etc. (1) The holder of a blue MSIC must return it to an issuing body 30 days or less after: (a) the MSIC expires; or (b) the holder is notified that it has been cancelled; or (c) the MSIC has been damaged, altered or defaced (permanently or temporarily). Penalty: 10 penalty units. (2) A contravention of subregulation (1) is an offence of strict liability. #### 6.08Q Holder no longer needing blue MSIC (1) The holder of a blue MSIC is guilty of an offence if: (a) he or she becomes aware of circumstances that will result in him or her not having an operational need to hold the MSIC for 12 months; and (b) he or she fails to return it to an issuing body within 30 days of becoming aware of the circumstances. Penalty: 5 penalty units. (2) Strict liability applies to paragraph (1)(b). #### 6.08R Notification of lost, stolen and destroyed blue MSICs (1) The holder of a blue MSIC commits an offence if: (a) the MSIC has been lost, stolen or destroyed; and (b) the holder of the MSIC knows about the loss, theft or destruction; and (c) he or she does not: (i) make a report, in the form of a statutory declaration, of the loss to the issuing body that issued the MSIC within 7 days of becoming aware of the loss, theft or destruction; or (ii) if the MSIC was stolen—give the issuing body a copy of a police report, or other information issued by the police, regarding the theft, within 7 days of becoming aware of the theft. Penalty: 10 penalty units. (2) Strict liability applies to paragraph (1)(c). (3) However, subregulation (1) does not apply if the MSIC has been destroyed by the issuing body that issued it. #### Subdivision 6.1A.5—Powers of security officers in relation to MSICs and temporary MSICs #### 6.08S Directions to show valid MSICs, temporary MSICs or other identification (1) In this regulation: > security officer means: (a) a law enforcement officer; or (b) a maritime security inspector. (2) If a person is in a part of a maritime security zone and apparently not properly displaying a valid MSIC or valid temporary MSIC, a security officer may (unless he or she knows the person to be an exempt person in relation to that part of the zone) direct the person to show him or her: (a) a valid blue MSIC or valid temporary MSIC; or (b) identification that establishes that the person is an exempt person. (3) Before directing the person to do so, the security officer must show the person: (a) the officer’s identity card; or (b) another appropriate form of identification. (4) A person must comply with a direction of a security officer under subregulation (2). Penalty: 10 penalty units. #### Subdivision 6.1A.6—Record‑keeping #### 6.08T Register of MSICs (1) An issuing body must keep a register in accordance with this regulation. (2) The register must contain the following details of each MSIC issued by the body to a person: (a) his or her name and telephone number (if any); (b) a copy of the photograph that appears on his or her MSIC; (c) subject to subregulation (3), his or her residential address; (d) the general reason that he or she has an operational need to hold an MSIC; (e) the documents used to decide about his or her eligibility for an MSIC; (f) the date of the beginning of the current period during which he or she has continuously held an MSIC; (g) the unique number of the MSIC; (h) its date of issue; (i) its date of expiry; (j) if applicable, the date on which it was cancelled; (ja) if the MSIC is cancelled and the cancellation is set aside by the Secretary or set aside (however described) by the Administrative Review Tribunal: (i) the date the cancellation is set aside; and (ii) if the holder returns the MSIC to the issuing body following the cancellation—the date the body returns the MSIC to the holder; (jb) if the MSIC is suspended: (i) the date the issuing body tells the holder about the suspension; and (ii) if the holder returns the MSIC to the issuing body following the suspension—the date the body returns the MSIC to the holder; and (iii) if the suspension period ends under subregulation 6.08LG(2)—the date the body returns the MSIC to the holder. (k) if applicable, the date or dates on which it was reported lost, stolen or destroyed. (3) The register need not contain the residential address of an MSIC holder who is: (a) a law enforcement officer; or (b) an officer or employee of ASIO; or (c) an employee of a Commonwealth authority. #### 6.08U Other records of issuing bodies (1) An issuing body must maintain records that are sufficient to demonstrate that it has complied with its MSIC plan. (2) The issuing body must retain the following, in relation to an application for the issuing body to issue an MSIC to a person: (a) a copy of the application; (b) if the issuing body issues the MSIC to the person—the record of issue of the MSIC; (c) copies of the identification documents that were given to the issuing body in relation to the application; (d) any records, or copies of any documents, that were given to the issuing body in relation to the applicant’s operational need for the MSIC. (2A) The records and documents required to be retained under subregulation (2) must be retained until: (a) if the issuing body issues the MSIC to the person—the end of 3 years after the completion of the background check most recently requested in relation to the application or the MSIC; or (b) otherwise—the end of 3 years after the application was made. (3) The records and documents may be kept by means of a computer or in any other form that can be conveniently audited. (5) The issuing body must allow a maritime security inspector to inspect the records and documents on request, subject to reasonable notice. #### 6.08V Annual reporting An issuing body must report to the Secretary in writing, within 1 month after the end of each financial year: (a) the total number of MSICs issued by the body; and (b) the number of MSICs issued by the body that have not expired and have not been cancelled; and (c) the number of blue MSICs issued by the body that have expired or been suspended or cancelled, but have not been returned to the body; and (d) the number of MSICs issued by the body that were cancelled in the financial year to which the report relates; and (e) the number of MSICs issued by the body that expired in that financial year; and (f) the number of MSICs issued by the body that were suspended in the financial year to which the report relates. Penalty: 20 penalty units. #### Subdivision 6.1A.7—Review of decisions #### 6.08W Definitions In this Subdivision: > ART means the Administrative Review Tribunal. > ART Act means the Administrative Review Tribunal Act 2024. > decision has the same meaning as in the ART Act. > Tribunal means the Administrative Review Tribunal. #### 6.08X Reconsideration of decisions in relation to MSICs and related matters Decisions in relation to issuing bodies (1) Application may be made to the Secretary for reconsideration of a decision of the Secretary: (c) to direct an issuing body to vary its MSIC plan; or (d) to refuse to approve a variation of an issuing body’s MSIC plan; or (e) to refuse to exempt an issuing body from giving effect to its MSIC plan in a particular case or respect; or (f) to impose a condition on an exemption; or (g) to revoke an issuing body’s authorisation; or (h) to refuse to revoke an issuing body’s authorisation. Decisions in relation to issue, suspension and cancellation of MSICs (3) Application may be made to the Secretary for: (a) reconsideration of a decision of the Secretary to: (i) refuse to approve the issue of an MSIC; or (ii) impose a condition on an MSIC; or (iii) direct the suspension of an MSIC; or (iv) give the issuing body for an MSIC a direction under paragraph 6.08H(1)(b); or (v) refuse to set aside the cancellation of an MSIC under regulation 6.08MB or 6.08MC; or (vi) set aside the cancellation of an MSIC subject to a condition under regulation 6.08MD; or (b) review of a decision of an issuing body to: (i) refuse to issue an MSIC to somebody; or (ii) issue an MSIC subject to a condition; or (iii) cancel an MSIC; or (iv) suspend an MSIC. Decisions in relation to wearing and use of MSICs (4) Application may be made to the Secretary for reconsideration of a decision of the Secretary: (a) to refuse to exempt somebody from displaying a valid MSIC in a maritime security zone, or part of such an area; or (b) to impose a condition on such an exemption. Decisions in relation to the substituted exercise of the powers of an issuing body (5) Application may be made to the Secretary for reconsideration of a decision of the Secretary: (a) to authorise, or refuse to authorise, a person to perform the functions, or exercise the powers, of an issuing body; or (b) to authorise a person to perform the functions or exercise the powers of an issuing body subject to a condition. #### 6.08Y If Secretary makes no decision If a person applies to the Secretary under regulation 6.08X for reconsideration or review of a decision and, 30 days after making the application, the Secretary has not notified his or her decision about the application to the applicant, the Secretary is taken to have refused to vary the original decision. #### 6.08Z ART review of Secretary’s decisions Review of reconsideration decisions (1) Applications may be made to the Tribunal for review of decisions of the Secretary under regulation 6.08X or 6.08Y. Decisions relating to alternative identification requirements (2) Applications may be made to the Tribunal for review of decisions of the Secretary under paragraph 6.08BC(5)(a) to refuse to approve alternative identification requirements for a person. #### Subdivision 6.1A.8—Miscellaneous #### 6.09A Recovery of costs and expenses (Act ss 105, 109, 113 and 113D) For subsections 105(4), 109(4), 113(4) and 113D(4) of the Act: (a) an issuing body may recover costs and expenses reasonably incurred by the body in relation to the issue of an MSIC from the person who asks the body to issue the MSIC; and (b) a maritime industry participant may recover costs and expenses reasonably incurred by the participant in relation to the issue of a temporary MSIC from the person who asks the participant to issue the temporary MSIC. ### Division 6.2—Port security zones #### Subdivision 6.2.1—General #### 6.20 Types of port security zones For subsection 103(1) of the Act, the following are prescribed as the types of port security zones that the Secretary may establish within a security regulated port: (a) land‑side restricted zones; (b) cleared zones; (c) water‑side restricted zones. #### 6.25 Security barriers (1) A fence, free standing wall, building or other similar object, or a series of objects such as trees, booms, marker buoys and other similar objects, may constitute a security barrier if the object or series of objects: (a) clearly defines the boundary of a maritime security zone; and (b) deters unauthorised access into the zone. (2) A security barrier for a land‑side restricted zone or a cleared zone must: (a) deter and deny unauthorised access to the zone; and (b) allow detection of unauthorised access to the zone; and (c) have access control points to permit authorised access, being access control points that do not present less of a barrier to unauthorised access than the surrounding parts of the security barrier; and (d) be subject to regular patrols, surveillance or other measures that allow inspection of the security barrier for damage, and that detect and deter unauthorised access. #### Subdivision 6.2.2—Land‑side restricted zones #### 6.30 Identification of zones (1) The boundaries of a land‑side restricted zone must be clearly identifiable and defined by means of a security barrier. (2) Persons who are in or in the vicinity of the security regulated port in which a land‑side restricted zone is established must be informed that: (a) access to the zone is controlled; and (b) any unauthorised entry into the zone is an offence under these Regulations. #### 6.33 Duties of port operator (1) A port operator must monitor and control access to any land‑side restricted zone in the security regulated port in which the zone is established. Penalty: 200 penalty units. (2) An offence against subregulation (1) is an offence of strict liability. #### 6.35 Duties of port facility operator (1) A port facility operator must monitor and control access to any land‑side restricted zone within the boundaries of the port facility. Penalty: 200 penalty units. (2) An offence against subregulation (1) is an offence of strict liability. #### 6.45 Offences—unauthorised entry (1) A person must not enter or remain in a land‑side restricted zone unless authorised to do so by: (a) the port operator for the security regulated port; or (b) the port facility operator for the port facility; in which the zone is established. Penalty: 50 penalty units. (2) A person must not take a vehicle or thing into, or leave a vehicle or thing in, a land‑side restricted zone unless authorised to do so by: (a) the port operator for the security regulated port; or (b) the port facility operator for the port facility; in which the zone is established. Penalty: 50 penalty units. (3) An offence against subregulation (1) or (2) is an offence of strict liability. #### Subdivision 6.2.3—Cleared zones #### 6.50 Duties of port facility operator (1) Immediately after the Secretary gives notice of the establishment of a cleared zone (but before the zone comes into force), the port facility operator for the port facility in which the zone is established must ensure that the zone is inspected for unauthorised persons, goods (including weapons and prohibited items), vehicles and vessels. (1A) In addition to subregulation (1), if an area is a cleared zone only at certain times, and not continuously, the port facility operator for the port facility in which the zone is established must ensure that the zone is inspected for unauthorised persons, goods (including weapons and prohibited items), vehicles and vessels before each occasion on which the area is a cleared zone. (2) A port facility operator must ensure that persons and goods are screened and cleared in accordance with these Regulations before they are allowed to enter and remain in any cleared zone established in the port facility. #### 6.55 Identification of zones (1) The boundaries of a cleared zone must be clearly identifiable and defined by means of a security barrier. (2) Persons who are in or in the vicinity of the security regulated port in which the cleared zone is established must be informed that: (a) access to the zone is controlled; and (b) any unauthorised entry into the zone is an offence under these Regulations. #### 6.60 Offences—unauthorised entry (1) A person who is required to be screened must not enter or remain in a cleared zone unless he or she has been screened and cleared. Penalty: 50 penalty units. (2) A person must not take a vehicle, vessel or thing into, or leave a vehicle, vessel or thing in, a cleared zone unless the vehicle, vessel or thing has been screened and cleared. Penalty: 50 penalty units. (3) An offence against subregulation (1) or (2) is an offence of strict liability. #### Subdivision 6.2.4—Water‑side restricted zones #### 6.65 Identification of zones (1) The boundaries of a water‑side restricted zone must be clearly identifiable. (2) The port operator for the security regulated port in which the water‑side restricted zone is established must give notice of the establishment and the boundaries of the water‑side restricted zone by: (a) water‑based identification measures (such as buoys, picket boats and booms); or (b) land‑side signs; or (c) posting, publishing or broadcasting notices; or (d) using any other means that have the effect of informing persons in or in the vicinity of the security regulated port about the establishment of the zone and its boundaries. #### 6.70 Duties of port operator (1) If the Secretary gives notice of the establishment of a water‑side restricted zone, the port operator for the security regulated port in which the water‑side restricted zone is established must ensure that persons who are in, or in the vicinity of, the security regulated port are informed, in accordance with the maritime security plan, that: (a) access to the zone is controlled; and (b) any unauthorised entry into the zone is an offence under these Regulations. (2) The obligation in subregulation (1) has effect even if the zone has not yet come into force. (3) A port operator for a security regulated port must monitor access to any water‑side restricted zone established in the port. Penalty: 200 penalty units. (4) An offence against subregulation (3) is an offence of strict liability. (5) A port operator must ensure that the security measures and procedures to control access to water‑side restricted zones detect and deter unauthorised access to those zones. #### 6.75 Offences—unauthorised entry (1) A person must not enter or remain in a water‑side restricted zone unless authorised to do so by the port operator, or a port facility operator acting on behalf of the port operator, of the security regulated port in which the zone is established. Penalty: 50 penalty units. (2) A person must not take a vessel or thing into, or leave a vessel or thing in, a water‑side restricted zone unless authorised to do so by the port operator for the security regulated port in which the zone is established. Penalty: 50 penalty units. (3) An offence against subregulation (1) or (2) is an offence of strict liability. ### Division 6.3—Ship security zones #### 6.80 Exclusion zones For subsection 107(1) of the Act, an exclusion zone is prescribed as a type of ship security zone. #### 6.85 Declaration of operation of zone (1) The port operator for a security regulated port may request the Secretary to declare that a ship security zone is to operate around a security regulated ship while the ship is in the port. (1A) The offshore facility operator for a security regulated offshore facility may request the Secretary to declare that a ship security zone is to operate around a security regulated ship while the ship is in the vicinity of the offshore facility and is engaged in any activity in relation to the facility. (2) A request under this regulation must be in writing and must set out: (a) the purpose for the proposed declaration; and (b) the boundaries of the ship security zone (that is, the distance from the security regulated ship in relation to which access is controlled); and (c) the security measures and procedures to be taken to control access into the zone by people, vessels or things; and (d) steps to be taken to inform people that a ship security zone has been declared and that entry into the zone without authority is an offence; and (e) the name or position of the person or persons responsible for the security measures, procedures or steps referred to in paragraphs (c) and (d). (3) The Secretary must make a decision on a request made under this regulation. (4) If the Secretary makes a decision under subregulation (3) to refuse a request, the Secretary must give the person who made the request written notice of the refusal including the reasons for the refusal. #### 6.90 Identification of zones (1) The boundaries of a ship security zone must be clearly identifiable. (2) The relevant operator must give notice of the establishment and the boundaries of the ship security zone by: (a) water‑based identification measures (such as buoys, picket boats and booms); or (b) signs; or (c) posting, publishing or broadcasting notices; or (d) using any other means that have the effect of informing persons in or in the vicinity of the security regulated port or security regulated offshore facility about the establishment of the zone and its boundaries. (3) For the purposes of this regulation, relevant operator means: (a) the port operator for the security regulated port in which the ship security zone is established; or (b) the offshore facility operator for the security regulated offshore facility in the vicinity of which the ship security zone is established. #### 6.95 Duties of port operator (1) If the Secretary gives notice of the establishment of a ship security zone in a security regulated port, the port operator for the port must ensure that persons who are in, or in the vicinity of, the port are informed, in accordance with the operator’s maritime security plan, that: (a) access to the zone is controlled; and (b) any unauthorised entry into the zone is an offence under these Regulations. (2) The obligation in subregulation (1) has effect even if the zone has not yet come into force. (3) The port operator for a security regulated port must monitor access to any ship security zone established in the port. Penalty: 200 penalty units. (4) An offence against subregulation (3) is an offence of strict liability. (5) The port operator for a security regulated port must ensure that the security measures and procedures to control access to ship security zones detect and deter unauthorised access to those zones. #### 6.96 Duties of offshore facility operator (1) If the Secretary gives notice of the establishment of a ship security zone in the vicinity of a security regulated offshore facility, the offshore facility operator for the facility must ensure that persons who are in, or in the vicinity of, the facility are informed, in accordance with the operator’s offshore security plan, that: (a) access to the zone is controlled; and (b) any unauthorised entry into the zone is an offence under these Regulations. (2) The obligation in subregulation (1) has effect even if the zone has not yet come into force. (3) The offshore facility operator for a security regulated offshore facility must monitor access to a ship security zone established in the vicinity of the facility. Penalty: 200 penalty units. (4) An offence against subregulation (3) is an offence of strict liability. (5) The offshore facility operator for a security regulated offshore facility must ensure that the security measures and procedures to control access to a ship security zone in the vicinity of the facility detect and deter unauthorised access to the zone. #### 6.100 Offences—unauthorised entry into ship security zone (1) A person must not enter, or remain in, a ship security zone in a security regulated port unless authorised to do so by the port operator for the port. Penalty: 50 penalty units. (2) A person must not enter, or remain in, a ship security zone in the vicinity of a security regulated offshore facility unless authorised to do so by the offshore facility operator for the facility. Penalty: 50 penalty units. (3) A person must not take a vessel or thing into, or leave a vessel or thing in, a ship security zone in a security regulated port unless authorised to do so by the port operator for the port. Penalty: 50 penalty units. (4) A person must not take a vessel or thing into, or leave a vessel or thing in, a ship security zone in the vicinity of a security regulated offshore facility unless authorised to do so by the offshore facility operator for the facility. Penalty: 50 penalty units. (5) An offence against subregulation (1), (2), (3) or (4) is an offence of strict liability. ### Division 6.4—On‑board security zones #### 6.105 On‑board restricted areas For subsection 111(1) of the Act, an on‑board restricted area is prescribed as a type of on‑board security zone. #### 6.110 Identification of zones The boundaries of an on‑board security zone established on a regulated Australian ship must be clearly identifiable and must be permanently and sufficiently marked with signs to inform persons who are on board, or in the vicinity of, the ship that: (a) access to the zone is controlled; and (b) any unauthorised entry into the zone is an offence under these Regulations. #### 6.115 Duties of ship operators (1) A ship operator must monitor and control access to any on‑board security zones in a regulated Australian ship. Penalty: 200 penalty units. (2) An offence against subregulation (1) is an offence of strict liability. (3) A ship operator must ensure that the security measures and procedures to control access to on‑board security zones detect and deter unauthorised access to those zones. #### 6.120 Offences—unauthorised entry (1) A person must not enter or remain in an on‑board security zone unless authorised to do so by the ship operator for the ship on which the zone is established. Penalty: 50 penalty units. (2) A person must not take goods or other things into or in an on‑board security zone unless authorised to do so by the ship operator for the ship on which the zone is established. Penalty: 50 penalty units. (3) An offence against subregulation (1) or (2) is an offence of strict liability. ### Division 6.5—Offshore security zones #### Subdivision 6.5.1—Preliminary #### 6.125 Types of offshore security zones (Act s 113B) For subsection 113B(1) of the Act, the following are prescribed as the types of offshore security zones that the Secretary may establish: (a) offshore facility zone; (b) offshore water‑side zone. #### Subdivision 6.5.2—Offshore facility zones #### 6.130 Identification of zones (1) An offshore facility zone must be clearly identifiable as an offshore security zone. (2) Persons who are in or in the vicinity of a zone must be informed that: (a) access to the zone is controlled; and (b) any unauthorised entry into the zone is an offence under these Regulations. #### 6.135 Duties of offshore facility operator (1) An offshore facility operator must monitor and control access to the offshore facility zone. Penalty: 200 penalty units. (2) An offence against subregulation (1) is an offence of strict liability. #### 6.140 Offences—unauthorised entry (1) A person must not enter or remain in an offshore facility zone unless authorised to do so by the offshore facility operator. Penalty: 50 penalty units. (2) An offence against subregulation (1) is an offence of strict liability. #### Subdivision 6.5.3—Offshore water‑side zones #### 6.145 Identification of zones The operator of an offshore facility for which an offshore water‑side zone is established must give notice of the establishment and the boundaries of the zone by: (a) water based identification measures; or (b) posting, publishing or broadcasting notices; or (c) using any other means that have the effect of informing persons in or in the vicinity of the zone about the establishment of the zone and its boundaries. #### 6.150 Duties of offshore facility operator (1) If the Secretary gives notice of the establishment of an offshore water‑side zone, the offshore facility operator concerned must ensure that persons who are in, or in the vicinity of, the security regulated offshore facility are informed, in accordance with the offshore security plan, that: (a) access to the zone is controlled; and (b) any unauthorised entry into the zone is an offence under these Regulations. (2) An offshore facility operator must monitor access to any offshore water‑side zone. Penalty: 200 penalty units (3) An offence against subregulation (2) is an offence of strict liability. (4) An offshore facility operator must ensure that the security measures and procedures to control access to offshore water‑side zones detect and deter unauthorised access to those zones. #### 6.155 Offences—unauthorised entry (1) A person must not enter or remain in an offshore water‑side zone unless authorised to do so by the offshore facility operator concerned. Penalty: 50 penalty units. (2) A person must not take a vessel or thing into, or leave a vessel or thing in, an offshore water‑side zone unless authorised to do so by the offshore facility operator concerned. Penalty: 50 penalty units. (3) An offence against subregulation (1) or (2) is an offence of strict liability. ## Part 7—Other security measures ### Division 7.1—Preliminary #### 7.05 Access not to be denied (1) Nothing in this Part has the effect of preventing entry into a maritime security zone by a person who: (a) is accompanied by a law enforcement officer for the purposes of an investigation; or (b) is an Australian Federal Police employee, a member of the Australian Federal Police, or an officer or employee of the police force or service of a State or Territory, who requires access for the purposes of a police investigation; or (c) is otherwise authorised by a law of the Commonwealth, State or Territory to enter the maritime security zone. > Note: Example: For paragraph (c), entry to maritime security zones must not be denied to law enforcement officers, customs officers or AMSA officers if the entry is required in the course of their duties. (2) Nothing in this Part has the effect of preventing a member of the Australian Defence Force who is on duty: (a) from entering a maritime security zone; or (b) from taking into a maritime security zone vessels, vehicles or goods: (i) for the purpose of gaining access to a ship that is under the control, or in the service, of the Australian Defence Force; or (ii) in connection with the movement, loading, unloading, maintenance or provisioning of such a ship. ### Division 7.2—Screening and clearing #### 7.20 Duties of port facility operator The port facility operator for a port facility in which a cleared zone is established must ensure that: (a) subject to regulation 7.25, persons boarding a security regulated ship that is a passenger ship: (i) have been screened in preparation for boarding, and cleared at the time they board the ship; or (ii) are screened and cleared immediately after they board the ship; and (b) subject to regulation 7.27, baggage taken on board the ship: (i) has been screened in preparation for being taken on board, and cleared at the time it is taken on board the ship; or (ii) is screened and cleared immediately after it is taken on board the ship. #### 7.25 Persons who need not be screened (1) For paragraph 115(2)(b) of the Act, the persons mentioned in subregulation (3) may pass through a screening point without being screened when boarding a security regulated ship that is a passenger ship for which maritime security level 1 is in force. (2) For paragraph 115(2)(c) of the Act, the persons mentioned in subregulation (3) may enter a cleared zone or board a cleared vessel other than through a screening point when maritime security level 1 is in force for the port facility in which the cleared zone is established or in which the cleared vessel is being loaded or unloaded. (3) For subregulations (1) and (2), the persons are: (a) in the case of a security regulated ship that is a passenger ship—a member of the ship’s crew; and (b) the CSO for the ship, while on duty; and (c) the PFSO for the port facility in which the cleared zone is established, while on duty; and (d) a PSO for the port in which the cleared zone is established, while on duty; and (e) a screening officer; and (f) a law enforcement officer; and (g) a member of the Australian Defence Force, in the course of his or her duties; and (h) an officer of AMSA, in the course of his or her duties; and (i) a biosecurity officer, in the course of his or her duties; and (j) a member of a fire, ambulance, medical, search or rescue service, in the course of his or her duties; and (k) an immigration officer, in the course of his or her duties; and (l) a maritime security inspector, in the course of his or her duties; and (m) a person appointed by a court to be a Marshal, when exercising a power or function, or performing a duty, conferred or imposed on him or her by the Admiralty Rules 1988; and (n) a person authorised to exercise a power or function, or perform a duty, conferred or imposed on a Marshal under those Rules, when exercising that power or function, or performing that duty. (4) For paragraph 115(2)(b) of the Act, the following persons may pass through a screening point without being screened when boarding a security regulated ship that is a passenger ship moored at a port facility for which maritime security level 2 or 3 is in force: (a) a law enforcement officer; and (b) a member of the Australian Defence Force, in the course of his or her duties; and (c) a member of a fire, ambulance, medical, search or rescue service, in the course of his or her duties. #### 7.27 Goods that need not be screened (1) For paragraph 116(2)(b) of the Act, baggage may pass through a screening point without being screened if the baggage belongs to a person who, under subregulation 7.25(1) or (4), need not be screened when boarding a security regulated ship that is a passenger ship. (2) For paragraph 116(2)(c) of the Act, baggage and other goods may enter a cleared zone or be taken on board a cleared vessel other than through a screening point if the baggage and goods belong to a person who, under subregulation 7.25(2), may enter the cleared zone or board the cleared vessel other than through the screening point. #### 7.28 Vehicles that need not be screened (1) For paragraph 117(2)(b) of the Act, a vehicle may pass through a screening point without being screened if the vehicle is being driven by a member of the Australian Defence Force who, under subregulation 7.25(1) or (4), need not be screened when boarding a security regulated ship that is a passenger ship. (2) For paragraph 117(2)(c) of the Act, a vehicle may enter a cleared zone or go on board a cleared vessel other than through a screening point if the vehicle is being driven by a member of the Australian Defence Force who, under subregulation 7.25(2), may enter the cleared zone or board the cleared vessel other than through the screening point. #### 7.29 Vessels that need not be screened (1) For paragraph 118(2)(b) of the Act, a vessel may pass through a screening point without being screened if the vessel is under the control of a member of the Australian Defence Force who, under subregulation 7.25(1) or (4), need not be screened when boarding a security regulated ship that is a passenger ship. (2) For paragraph 118(2)(c) of the Act, a vessel may enter a cleared zone or be taken on board a cleared vessel other than through a screening point if the vessel is under the control of a member of the Australian Defence Force who, under subregulation 7.25(2), may enter the cleared zone or board the cleared vessel other than through the screening point. #### 7.30 Methods, techniques and equipment to be used for screening—Secretary’s notice (1) For subsection 119(3) of the Act, the Secretary may, by written notice, state 1 or more of the following: (a) the method to be used for screening under this Part; (b) the technique to be used for screening under this Part; (c) the equipment to be used for screening under this Part. > Note: The notice may provide that the notice is to be given only to the person, or class of persons, specified in the notice—see subsection 119(3) of the Act. (1A) To avoid doubt, and without limiting subregulation (1), a notice under that subregulation may apply in relation to a large passenger ship or a small passenger ship. (2) A notice under subregulation (1) is binding on a person only if it has been served on the person. #### 7.31 Equipment to be used for screening—no notice (1) This regulation applies if there is no notice in force under regulation 7.30 stating the equipment to be used for screening under this Part. (2) For subsection 119(1) of the Act, the equipment to be used for screening under this Part must be capable of detecting prohibited items and weapons on persons or in baggage. > Note: For the meaning of prohibited item and weapon, see section 10 of the Act and regulations 1.60 and 1.65. (3) The equipment may comprise a combination of screening equipment such as a walk‑through metal detector, hand‑held metal detector, trace explosive detection device and x‑ray equipment. #### 7.33 Notice to be displayed at screening points (1) For paragraph 119(2)(l) of the Act, notices that it is an offence under the Act to carry weapons or prohibited items through a screening point must be displayed with reasonable prominence at screening points. (2) A notice must include a list of weapons and prohibited items for the purposes of the Act. > Note 1: See section 10 of the Act and regulations 1.60 and 1.65 as to what are prohibited items and weapons. > Note 2: Sections 121 and 128 of the Act create the offences of carrying weapons and prohibited items through screening points. Certain persons are authorised, under those sections and regulation 7.45, to carry weapons or prohibited items through screening points. #### 7.34 Supervision and control measures to ensure persons and baggage remain cleared For paragraph 119(2)(m) of the Act, either or both of the following are supervision and control measures to ensure that a person or baggage that has received clearance remains cleared on a vessel that is not a cleared vessel or in an area that is not a cleared area: (a) the person or baggage is continuously supervised by security personnel while on the vessel or in the area; (b) the person or baggage is continuously monitored by security personnel through closed circuit television while on the vessel or in the area. > Note: Subsections 115(4) and 116(4) of the Act provide that a person is, or goods are, taken to be in a cleared area if the person is, or goods are, under the supervision or control prescribed in the regulations. #### 7.35 Offences—screening and clearing (1) A port facility operator must not allow a person who is required to be screened to enter a cleared zone, unless the person has been screened and cleared. Penalty: 200 penalty units. (2) A port facility operator must not allow goods that are required to be screened to enter a cleared zone, unless the goods have been screened and cleared. Penalty: 200 penalty units. (3) A port facility operator must not allow a person who is required to be screened and cleared to board a security regulated ship that is a passenger ship that is moored at the facility, unless: (a) if there is a screening point through which the person must pass at the facility—the person has been screened in preparation for boarding, and cleared at the time the person boards the ship; (b) if there is no such screening point at the facility—the port facility operator has made arrangements with the master of the ship for the person to be screened and cleared on board the ship immediately after the person boards the ship. Penalty: 200 penalty units. (4) A port facility operator must not allow baggage that is required to be screened and cleared to be taken on board a security regulated ship that is a passenger ship that is moored at the facility, unless: (a) if there is a screening point through which the baggage must pass at the facility—the baggage has been screened in preparation for being taken on board the ship, and cleared at the time it is taken on board; (b) if there is no such screening point at the facility—the port facility operator has made arrangements with the master of the ship for the baggage to be screened and cleared on board the ship immediately after the baggage is taken on board. Penalty: 200 penalty units. (5) A ship operator for a security regulated ship that is a passenger ship must not allow a person who is required to receive clearance to board the ship, unless: (a) the person is cleared at the time the person boards the ship; or (b) the person is screened and cleared on board the ship immediately after the person boards the ship. Penalty: 200 penalty units. (6) A ship operator for a security regulated ship that is a passenger ship must not allow baggage that is required to receive clearance to be taken on board the ship, unless: (a) the baggage is cleared at the time it is taken on board the ship; or (b) the baggage is screened and cleared on board the ship immediately after the baggage is taken on board. Penalty: 200 penalty units. ### Division 7.3—Weapons and prohibited items #### 7.39 Definition of licensed security guard for Division 7.3 (1) In this Division: > licensed security guard means a person who holds a licence to work as a security guard, being a licence: (a) issued or recognised by the State or Territory in which the person is working; and (b) that is in force. (2) For the purposes of paragraph (a) of the definition of licensed security guard in subregulation (1), if a person is working outside of a State or Territory on a regulated Australian ship or a regulated offshore facility, the person is taken to be working in: (a) for a regulated Australian ship—the State or Territory in which the ship’s home port (within the meaning of the Shipping Registration Regulations 1981) is located; or (b) for a regulated offshore facility—the State or Territory adjacent to the place where the offshore facility is located. #### 7.40 Persons authorised to possess weapons or prohibited items in maritime security zones (1) This regulation applies for sections 120 and 127 of the Act. (2) A person is authorised to have a weapon or prohibited item in his or her possession while in a maritime security zone if the person is: (a) a maritime security guard, an SSO, or a licensed security guard, who is on duty; or (b) the master of a security regulated ship located in the zone who has the weapon or prohibited item in his or her possession for the purpose of securing it for carriage on board the ship; or (c) a PSO, PFSO or screening officer, who has the weapon or prohibited item in his or her possession for the purpose of securing it for carriage on board a security regulated ship; or (d) a veterinarian, or a biosecurity officer, who has the weapon or prohibited item in his or her possession for the purpose of controlling or euthanasing animals in a maritime security zone or on board a security regulated ship or other vessel; or (e) a biosecurity officer who has the weapon or prohibited item in his or her possession for the purpose of eradicating pests or treating diseases in a maritime security zone or on board a security regulated ship or other vessel; or (f) an officer of a State or Territory department who has the weapon or prohibited item in his or her possession for the purpose of eradicating pests or treating diseases in a maritime security zone, or on board a security regulated ship or other vessel, under a law of the State or Territory. (3) In addition, a person is authorised to have a weapon or prohibited item in his or her possession while in a maritime security zone if: (a) the person is: (i) an inspector of the Royal Society for the Prevention of Cruelty to Animals of a State or Territory; or (ii) an officer of any other organisation that has as one of its objects the promotion of the welfare of, or the prevention of cruelty to, animals; and (b) the person has the weapon or prohibited item in his or her possession in connection with carrying out an inspection related to the welfare of any animals in a maritime security zone or on board a security regulated ship; and (c) the inspection is authorised by a law of the State or Territory in which the maritime security zone or the ship is located. #### 7.45 Authorised possession of weapons or prohibited items when passing through screening points (1) This regulation applies for sections 121 and 128 of the Act. (2) A person is authorised to pass through a screening point with a weapon or prohibited item in his or her possession if the person is: (a) a maritime security guard, an SSO, or a licensed security guard, who is on duty; or (b) the master of a security regulated ship who is passing through the screening point with the weapon or prohibited item in his or her possession for the purpose of securing it for carriage on board the ship; or (c) a PSO, PFSO or screening officer, who is passing through the screening point with the weapon or prohibited item in his or her possession for the purpose of securing it for carriage on board a security regulated ship; or (d) an ADF member who is on duty; or (e) a veterinarian, or a biosecurity officer, who has the weapon or prohibited item in his or her possession for the purpose of controlling or euthanasing animals in a maritime security zone or on board a security regulated ship; or (f) a biosecurity officer who has the weapon or prohibited item in his or her possession for the purpose of eradicating pests or treating diseases in a maritime security zone or on board a security regulated ship; or (g) an officer of a State or Territory department who has the weapon or prohibited item in his or her possession for the purpose of eradicating pests or treating diseases in a maritime security zone, or on board a security regulated ship, under a law of the State or Territory. (3) In addition, a person is authorised to pass through a screening point with a weapon or prohibited item in his or her possession if: (a) the person is: (i) an inspector of the Royal Society for the Prevention of Cruelty to Animals of a State or Territory; or (ii) an officer of any other organisation that has as one of its objects the promotion of the welfare of, or the prevention of cruelty to, animals; and (b) the person has the weapon or prohibited item in his or her possession in connection with carrying out an inspection related to the welfare of any animals in a maritime security zone or on board a security regulated ship; and (c) the inspection is authorised by a law of the State or Territory in which the maritime security zone or the ship is located. #### 7.50 Authorised carriage or possession of weapons or prohibited items on board regulated Australian ships (1) This regulation applies for sections 122, 123, 129 and 130 of the Act. (2) A person is authorised to carry, or otherwise have in his or her possession, a weapon or prohibited item on board a regulated Australian ship if the person is: (a) a maritime security guard, an SSO, or a licensed security guard, who is on duty; or (b) the master of the ship, or a PSO, PFSO or screening officer, who has the weapon or prohibited item in his or her possession for the purpose of securing the weapon or prohibited item for carriage on the ship; or (c) an ADF member who is on duty; or (d) a veterinarian, or a biosecurity officer, who has the weapon or prohibited item in his or her possession for the purpose of controlling or euthanasing animals on board the ship; or (e) a biosecurity officer who has the weapon or prohibited item in his or her possession for the purpose of eradicating pests or treating diseases on board the ship; or (f) an officer of a State or Territory department who has the weapon or prohibited item in his or her possession for the purpose of eradicating pests or treating diseases on board the ship under a law of the State or Territory. (3) In addition, a person is authorised to carry, or otherwise have in his or her possession, a weapon or prohibited item on board a regulated Australian ship if: (a) the person is: (i) an inspector of the Royal Society for the Prevention of Cruelty to Animals of a State or Territory; or (ii) an officer of any other organisation that has as one of its objects the promotion of the welfare of, or the prevention of cruelty to, animals; and (b) the person has the weapon or prohibited item in his or her possession in connection with carrying out an inspection related to the welfare of any animals on board the ship; and (c) the inspection is authorised by a law of the State or Territory in which the ship is located. #### 7.55 Authorisation subject to compliance with other laws In spite of regulations 7.40, 7.45 and 7.50, a person is not authorised to carry or possess a weapon or prohibited item in the circumstances stated in those regulations if: (a) carriage or possession of the weapon or prohibited item is prohibited by another law of the Commonwealth, or a law of a State or Territory, without a licence, permit or authorisation; and (b) the person does not have a licence, permit or authorisation of that kind for the weapon or prohibited item.