Part 1
//
© 2026 Zoe. All rights reserved.
Zoe is a legal information platform. Always consult the Federal Register of Legislation for authoritative text.
Commonwealth legislation
**What this instrument does (mechanics)
Who it affects
Want the full deep dive?
Zoe can write the in-depth analysis on top of the summary above: how it works, who it affects and what each part actually does.
Direct links to the current provisions in National Health Security Regulations 2018.
This instrument is the National Health Security Regulations 2018.
This instrument is made under the National Health Security Act 2007.
Note: A number of expressions used in this instrument are defined in the Act, including the following:
(a) entity;
(b) facility;
(c) handling;
(d) registered entity;
(e) security‑sensitive biological agent;
(f) SSBA;
(g) SSBA Standards.
In this instrument:
ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.
Note: ABN is short for Australian Business Number.
ACN has the same meaning as in the Corporations Act 2001.
Note: ACN is short for Australian Company Number.
Act means the National Health Security Act 2007.
affected: the body of a person or animal is affected by a security‑sensitive biological agent if the security‑sensitive biological agent has been introduced into the body.
ARBN has the same meaning as in the Corporations Act 2001.
Note: ARBN is short for Australian Registered Body Number.
Deputy Responsible Officer has the same meaning as in the SSBA Standards.
Geocentric Datum of Australia 1994 means the Geocentric Datum of Australia as defined in Gazette No. GN 35 of 6 September 1995, as existing when this instrument commences.
law enforcement agency has the meaning given by subsection 9(2).
Responsible Officer has the same meaning as in the SSBA Standards.
sensitive information, in relation to a security‑sensitive biological agent that an entity handles at a facility, means any of the following:
(a) the entity’s storage records for the agent;
(b) the entity’s risk assessment plan for the agent;
(c) the entity’s risk management plan for the agent;
(d) any information:
(i) that the entity holds; and
(ii) disclosure of which could compromise the security of the agent.
For the purposes of paragraph 23(2)(b) of the Act, each of the following intelligence agencies is prescribed: (a) the Australian Federal Police; (b) the Australian Security Intelligence Organisation.
This instrument is the National Health Security Regulations 2018.
This instrument is made under the National Health Security Act 2007.
Note: A number of expressions used in this instrument are defined in the Act, including the following:
(a) entity;
(b) facility;
(c) handling;
(d) registered entity;
(e) security‑sensitive biological agent;
(f) SSBA;
(g) SSBA Standards.
In this instrument:
ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.
Note: ABN is short for Australian Business Number.
ACN has the same meaning as in the Corporations Act 2001.
Note: ACN is short for Australian Company Number.
Act means the National Health Security Act 2007.
affected: the body of a person or animal is affected by a security‑sensitive biological agent if the security‑sensitive biological agent has been introduced into the body.
ARBN has the same meaning as in the Corporations Act 2001.
Note: ARBN is short for Australian Registered Body Number.
Deputy Responsible Officer has the same meaning as in the SSBA Standards.
Geocentric Datum of Australia 1994 means the Geocentric Datum of Australia as defined in Gazette No. GN 35 of 6 September 1995, as existing when this instrument commences.
law enforcement agency has the meaning given by subsection 9(2).
Responsible Officer has the same meaning as in the SSBA Standards.
sensitive information, in relation to a security‑sensitive biological agent that an entity handles at a facility, means any of the following:
(a) the entity’s storage records for the agent;
(b) the entity’s risk assessment plan for the agent;
(c) the entity’s risk management plan for the agent;
(d) any information:
(i) that the entity holds; and
(ii) disclosure of which could compromise the security of the agent.
For the purposes of paragraph 23(2)(b) of the Act, each of the following intelligence agencies is prescribed: (a) the Australian Federal Police; (b) the Australian Security Intelligence Organisation.
For the purposes of paragraph 37(f) of the Act, the following particulars are prescribed in relation to an entity: (a) if the entity’s head office is located at a place other than a facility where the entity handles security‑sensitive biological agents: (i) the address of the entity’s head office; and (ii) the entity’s postal address; (b) the entity’s telephone number, fax number and email address; (c) if the entity has an ABN, ACN or ARBN—those details; (d) for each facility where the entity handles security‑sensitive biological agents: (i) the geographic coordinates of the facility, expressed in terms of the Geocentric Datum of Australia 1994; and (ii) the fax number of the facility; and (iii) the name, telephone number, after hours telephone number and email address of the Responsible Officer for the facility; and (iv) the name, telephone number, after hours telephone number and email address of the Deputy Responsible Officer for the facility; (e) if the Secretary decides under section 49 of the Act to vary the National Register to take account of a reportable event in relation to the entity—details of the reportable event; (f) if the Secretary decides under subsection 52(2) of the Act to vary the National Register on a temporary basis to take account of a reportable event in relation to the entity: (i) details of the reportable event; and (ii) a statement that the variation is temporary.
For the purposes of paragraph 40(1)(b) of the Act, this Division prescribes entities to be exempt entities.
(1) A law enforcement agency is an exempt entity in relation to a security‑sensitive biological agent if the agency: (a) handles the security‑sensitive biological agent only in the course of carrying out a function of the agency under a law of the Commonwealth, or of a State or Territory; and (b) does not handle the security‑sensitive biological agent for the purpose of using it as a control sample for testing or carrying out diagnostic analysis. (2) Each of the following is a law enforcement agency: (a) the Australian Federal Police; (b) a police force of a State or Territory; (c) the Department administered by the Minister administering Part 1 of Chapter 8 of the Biosecurity Act 2015; (d) the Department administered by the Minister administering Part XII of the Customs Act 1901.
(1) An entity that holds: (a) a depot licence (within the meaning of Part IVA of the Customs Act 1901); or (b) a warehouse licence (within the meaning of Part V of that Act); is an exempt entity in relation to a security‑sensitive biological agent if the entity handles the security‑sensitive biological agent only in accordance with the licence. (2) An entity that is permitted or required to do something under: (a) paragraphs 77VA(2)(a) to (d) of the Customs Act 1901; or (b) paragraphs 86(7)(a) to (d) of that Act; is an exempt entity in relation to a security‑sensitive biological agent if the entity handles the security‑sensitive biological agent only in accordance with that permission or requirement.
Persons affected by security‑sensitive biological agents (1) A person who is affected by a security‑sensitive biological agent is an exempt entity in relation to that security‑sensitive biological agent while the person is affected by it. Providing treatment to affected persons or animals (2) An entity that provides treatment to a person or animal is an exempt entity in relation to a security‑sensitive biological agent if: (a) the person or animal is or has been affected by the security‑sensitive biological agent; and (b) the entity handles the security‑sensitive biological agent only while: (i) the security‑sensitive biological agent is in the body of the person or animal; or (ii) taking a sample from the person or animal for the purposes of the treatment. Destroying affected animals (3) An entity that destroys an animal is an exempt entity in relation to a security‑sensitive biological agent if: (a) the animal is affected by the security‑sensitive biological agent; and (b) the entity destroys the animal because the animal is affected by the security‑sensitive biological agent; and (c) the entity handles the security‑sensitive biological agent only in the course of destroying the animal. Handling of bodies of affected deceased persons (4) An entity that has the function of: (a) examining, identifying, storing, transporting, burying or cremating the bodies of deceased persons; or (b) preparing the bodies of deceased persons for burial or cremation; is an exempt entity in relation to a security‑sensitive biological agent if: (c) a deceased person was affected by the security‑sensitive biological agent before the person’s death; and (d) the entity handles the security‑sensitive biological agent only in the course of carrying out a function mentioned in paragraph (a) or (b) in relation to the person’s body.
An entity that has the function of handling mice to test for the presence of botulinum toxin is an exempt entity in relation to botulinum toxin if the entity: (a) handles the botulinum toxin only in the course of carrying out that function; and (b) does not handle the botulinum toxin for the purpose of using it as a control sample for testing or carrying out diagnostic analysis.
(1) This section applies if: (a) a security‑sensitive biological agent is included in the National Register in relation to an entity and a facility; and (b) a person at the facility enters a place where the security‑sensitive biological agent is handled. (2) For the purposes of paragraph 48(1)(g) of the Act, access by the person to the security‑sensitive biological agent at that place is unauthorised if: (a) the person is neither: (i) authorised by the entity, in accordance with Part 3 of the SSBA Standards, to enter the place; nor (ii) approved by the entity, in accordance with Part 3 of the SSBA Standards, to enter the place; or (b) the person is so authorised or approved, but the person enters the place other than in accordance with the authorisation or approval.
For the purposes of paragraph 48(1)(h) of the Act, this Subdivision prescribes events in relation to registered entities.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity transfers the security‑sensitive biological agent from the facility to another facility of the entity; and (c) the security‑sensitive biological agent is received at the other facility; and (d) the entity verifies, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the other facility was successful. (2) The event mentioned in paragraph (1)(d) is a reportable event for the entity.
Note: The event mentioned in paragraph (1)(b) is a reportable event for the entity under subparagraph 48(1)(e)(ii) of the Act.
Transfers to facilities of other entities (3) Subregulation (4) applies if: (a) a registered entity (the sending entity) is included on the National Register in relation to a facility (the sending facility) and a security‑sensitive biological agent; and (b) another registered entity (the receiving entity) is included on the National Register in relation to another facility (the receiving facility) and the same security‑sensitive biological agent; and (c) the sending entity transfers the security‑sensitive biological agent from the sending facility to the receiving facility; and (d) the security‑sensitive biological agent is received at the receiving facility; and (e) the receiving entity verifies, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the receiving facility was successful. (4) The event mentioned in paragraph (3)(e) is a reportable event for the receiving entity.
Note: The event mentioned in paragraph (3)(c) is a reportable event for the sending entity under subparagraph 48(1)(e)(i) of the Act.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity transfers the security‑sensitive biological agent from the facility to another facility of the entity; and (c) the security‑sensitive biological agent is received at the other facility; and (d) the entity is unable to verify, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the other facility was successful. (2) The event mentioned in paragraph (1)(d) is a reportable event for the entity.
Note: The event mentioned in paragraph (1)(b) is a reportable event for the entity under subparagraph 48(1)(e)(ii) of the Act.
Transfers to facilities of other entities (3) Subregulation (4) applies if: (a) a registered entity (the sending entity) is included on the National Register in relation to a facility (the sending facility) and a security‑sensitive biological agent; and (b) another registered entity (the receiving entity) is included on the National Register in relation to another facility (the receiving facility) and the same security‑sensitive biological agent; and (c) the sending entity transfers the security‑sensitive biological agent from the sending facility to the receiving facility; and (d) the security‑sensitive biological agent is received at the receiving facility; and (e) the receiving entity is unable to verify, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological to the receiving facility was successful. (4) The event mentioned in paragraph (3)(e) is a reportable event for the receiving entity.
Note: The event mentioned in paragraph (3)(c) is a reportable event for the sending entity under subparagraph 48(1)(e)(i) of the Act.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity arranges for the transfer of the security‑sensitive biological agent from the facility to another facility of the entity; and (c) the entity notifies the other facility, in accordance with Part 6 of the SSBA Standards, of the expected time of delivery of the security‑sensitive biological agent to the other facility; and (d) the security‑sensitive biological agent is not received at the other facility by the notified expected time of delivery. (2) The event mentioned in paragraph (1)(d) is a reportable event for the entity.
Note 1: Transferring the security‑sensitive biological agent is a reportable event for the entity under subparagraph 48(1)(e)(ii) of the Act.
Note 2: Loss or theft of the security‑sensitive biological agent is a reportable event for the entity under paragraph 48(1)(f) of the Act.
(3) Subsection (2) does not apply if: (a) the security‑sensitive agent is received at the other facility within 2 business days after the notified expected time of delivery; and (b) at all times between the notified expected time of delivery and the receiving of the security‑sensitive biological agent, the entity knows that the security‑sensitive biological agent is not lost or stolen. Transfers to facilities of other entities (4) Subregulation (5) applies if: (a) a registered entity (the sending entity) is included on the National Register in relation to a facility (the sending facility) and a security‑sensitive biological agent; and (b) another registered entity (the receiving entity) is included on the National Register in relation to another facility (the receiving facility) and the same security‑sensitive biological agent; and (c) the sending entity arranges with the receiving entity for the transfer of the security‑sensitive biological agent from the sending facility to the receiving facility; and (d) the sending entity notifies the receiving entity, in accordance with Part 6 of the SSBA Standards, of the expected time of delivery of the security‑sensitive biological agent to the receiving facility; and (e) the security‑sensitive biological agent is not received at the receiving facility by the notified expected time of delivery. (5) The event mentioned in paragraph (4)(e) is a reportable event for the receiving entity.
Note 1: Transferring the security‑sensitive biological agent is a reportable event for the sending entity under subparagraph 48(1)(e)(i) of the Act.
Note 2: Loss or theft of the security‑sensitive biological agent is a reportable event for the sending entity under paragraph 48(1)(f) of the Act.
(6) Subsection (5) does not apply if: (a) the security‑sensitive agent is received at the receiving facility within 2 business days after the notified expected time of delivery; and (b) at all times between the notified expected time of delivery and the receiving of the security‑sensitive biological agent, the receiving entity knows that the security‑sensitive biological agent is not lost or stolen.
An event mentioned in column 1 of an item of the following table is prescribed in relation to a registered entity that is included on the National Register in relation to a facility and a security‑sensitive biological agent, if: (a) there are no circumstances mentioned in column 2 of the item; or (b) the circumstances mentioned in column 2 of the item exist.
<table cellspacing="0" cellpadding="0" style="width:100%; border-collapse:collapse"><thead><tr><td colspan="3" style="border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Reportable events</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Item</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 1</span></p><p class="TableHeading"><span>Event</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 2</span></p><p class="TableHeading"><span>Circumstances</span></p></td></tr></thead><tbody><tr><td style="width:7.86%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>1</span></p></td><td style="width:42.78%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person handles the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the handling is not in accordance with the authorisation or approval</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to handle the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the attempt is not in accordance with the authorisation or approval</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>3</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to access the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the access is unauthorised under section</span><span> </span><span>13</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>4</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to steal the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>none</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>5</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the security</span><span>‑</span><span>sensitive biological agent is accidentally released during its handling at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>none</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>6</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person who has been to the facility is affected by the security</span><span>‑</span><span>sensitive biological agent as a result of the entity’s handling of the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>none</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>7</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person accesses sensitive information at the facility about the security</span><span>‑</span><span>sensitive biological agent</span></p><p class="notemargin"><span>Note:</span><span style="width:15.45pt; text-indent:0pt; display:inline-block"> </span><span>For </span><span style="font-weight:bold; font-style:italic">sensitive information,</span><span> see section</span><span> </span><span>5.</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the access is not in accordance with the authorisation or approval</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>8</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to access sensitive information at the facility about the security</span><span>‑</span><span>sensitive biological agent</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the access is not in accordance with the authorisation or approval</span></p></td></tr></tbody></table>
The following events are prescribed in relation to a registered entity: (a) a change to any of the following: (i) the entity’s name; (ii) if the entity’s head office is located at a place other than a facility where the entity handles security‑sensitive biological agents—the address of the entity’s head office, or the entity’s postal address; (iii) the entity’s telephone number, fax number or email address; (iv) the entity’s ABN, ACN or ARBN; (b) any of the following events in relation to a facility where the entity handles security‑sensitive biological agents: (i) a change to the name, location or fax number of the facility; (ii) a change to the telephone number, after hours telephone number or email address of the Responsible Officer or the Deputy Responsible Officer for the facility; (iii) the Responsible Officer for the facility ceases to be the Responsible Officer; (iv) the Deputy Responsible Officer for the facility ceases to be the Deputy Responsible Officer; (v) a Responsible Officer or Deputy Responsible Officer is appointed for the facility.
For the purposes of subsection 48(3) of the Act, a registered entity that must give a report about a reportable event mentioned in column 1 of an item of the following table must give the report within the period mentioned in column 2 of the item.
<table cellspacing="0" cellpadding="0" style="width:100%; border-collapse:collapse"><thead><tr><td colspan="3" style="border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>When reports must be given</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Item</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 1</span></p><p class="TableHeading"><span>For a reportable event mentioned in …</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 2</span></p><p class="TableHeading"><span>the report must be given within …</span></p></td></tr></thead><tbody><tr><td style="width:7.68%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>1</span></p></td><td style="width:48.68%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>paragraph</span><span> </span><span>48(1)(a) of the Act (entity starts to handle a security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity starts to handle the security</span><span>‑</span><span>sensitive biological agent.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) paragraph</span><span> </span><span>48(1)(b) of the Act (entity disposes of its entire holdings of a security</span><span>‑</span><span>sensitive biological agent); or</span></p><p class="Tablea"><span>(b) paragraph</span><span> </span><span>48(1)(c) of the Act (disposal of toxins resulting in less than a reportable quantity)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>3</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>subparagraph</span><span> </span><span>48(1)(d)(i) of the Act (entity starts to handle a security</span><span>‑</span><span>sensitive biological agent for a purpose not specified in the National Register)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity starts to handle the security</span><span>‑</span><span>sensitive biological agent for that purpose.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>4</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>subparagraph</span><span> </span><span>48(1)(d)(ii) of the Act (entity stops handling a security</span><span>‑</span><span>sensitive biological agent for a purpose specified in the National Register)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity stops handling the security</span><span>‑</span><span>sensitive biological agent for that purpose.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>5</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>paragraph</span><span> </span><span>48(1)(e) of the Act (entity transfers a security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>6</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) paragraph</span><span> </span><span>48(1)(f) of the Act (security</span><span>‑</span><span>sensitive biological agent is lost or stolen); or</span></p><p class="Tablea"><span>(b) paragraph</span><span> </span><span>48(1)(g) of the Act (unauthorised access to a security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity becomes aware of the event.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>7</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>section</span><span> </span><span>15, 16 or 17 of this instrument (transfer of security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>8</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>section</span><span> </span><span>18 of this instrument (unauthorised handling etc.)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity becomes aware of the event.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>9</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>section</span><span> </span><span>19 of this instrument (change in particulars)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr></tbody></table>
(1) For the purposes of paragraph 48A(1)(b) of the Act, the following reportable events are prescribed: (a) the event mentioned in paragraph 48(1)(g) of the Act; (b) the event mentioned in subsection 16(2) or (4) of this instrument; (c) the event mentioned in subsection 17(2) or (5) of this instrument; (d) the event mentioned in column 1 of item 1, 2, 3, 4, 7 or 8 of the table in section 18 of this instrument. (2) For the purposes of subsection 48A(3) of the Act, the period is the period of 24 hours after the registered entity becomes aware of the event.
For the purposes of subparagraph 60AF(1)(b)(ii) of the Act, access is unauthorised if the access does not comply with Part 10 of the SSBA Standards.
When reports must be given to Secretary (1) For the purposes of subsection 60AF(2) of the Act, the period is the period of 2 business days after the entity becomes aware of the event. When reports must be given to police (2) For the purposes of subsection 60AH(3) of the Act, the period is the period of 24 hours after the entity becomes aware of the event.
For the purposes of paragraph 64(2)(a) of the Act, an identity card issued to an inspector must contain the following: (a) the full name of the inspector; (b) a statement that the person to whom the card is issued is appointed under subsection 63(1) of the Act; (c) for the photograph required under paragraph 64(2)(b) of the Act, an image showing the inspector’s full face, head and shoulders; (d) the date the card was issued; (e) the date the card expires.
Note: Paragraph 64(2)(b) of the Act provides that an identity card issued to an inspector must contain a recent photograph of the inspector.
Intelligence agency (1) For the purposes of paragraph 85(1)(a) of the Act, the Australian Security Intelligence Organisation is prescribed. Law enforcement agencies (2) For the purposes of paragraph 85(1)(b) of the Act, the following law enforcement agencies are prescribed: (a) the Australian Federal Police; (b) the police force of a State or Territory.
This instrument is the National Health Security Regulations 2018.
This instrument is made under the National Health Security Act 2007.
Note: A number of expressions used in this instrument are defined in the Act, including the following:
(a) entity;
(b) facility;
(c) handling;
(d) registered entity;
(e) security‑sensitive biological agent;
(f) SSBA;
(g) SSBA Standards.
In this instrument:
ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.
Note: ABN is short for Australian Business Number.
ACN has the same meaning as in the Corporations Act 2001.
Note: ACN is short for Australian Company Number.
Act means the National Health Security Act 2007.
affected: the body of a person or animal is affected by a security‑sensitive biological agent if the security‑sensitive biological agent has been introduced into the body.
ARBN has the same meaning as in the Corporations Act 2001.
Note: ARBN is short for Australian Registered Body Number.
Deputy Responsible Officer has the same meaning as in the SSBA Standards.
Geocentric Datum of Australia 1994 means the Geocentric Datum of Australia as defined in Gazette No. GN 35 of 6 September 1995, as existing when this instrument commences.
law enforcement agency has the meaning given by subsection 9(2).
Responsible Officer has the same meaning as in the SSBA Standards.
sensitive information, in relation to a security‑sensitive biological agent that an entity handles at a facility, means any of the following:
(a) the entity’s storage records for the agent;
(b) the entity’s risk assessment plan for the agent;
(c) the entity’s risk management plan for the agent;
(d) any information:
(i) that the entity holds; and
(ii) disclosure of which could compromise the security of the agent.
For the purposes of paragraph 23(2)(b) of the Act, each of the following intelligence agencies is prescribed: (a) the Australian Federal Police; (b) the Australian Security Intelligence Organisation.
For the purposes of paragraph 37(f) of the Act, the following particulars are prescribed in relation to an entity: (a) if the entity’s head office is located at a place other than a facility where the entity handles security‑sensitive biological agents: (i) the address of the entity’s head office; and (ii) the entity’s postal address; (b) the entity’s telephone number, fax number and email address; (c) if the entity has an ABN, ACN or ARBN—those details; (d) for each facility where the entity handles security‑sensitive biological agents: (i) the geographic coordinates of the facility, expressed in terms of the Geocentric Datum of Australia 1994; and (ii) the fax number of the facility; and (iii) the name, telephone number, after hours telephone number and email address of the Responsible Officer for the facility; and (iv) the name, telephone number, after hours telephone number and email address of the Deputy Responsible Officer for the facility; (e) if the Secretary decides under section 49 of the Act to vary the National Register to take account of a reportable event in relation to the entity—details of the reportable event; (f) if the Secretary decides under subsection 52(2) of the Act to vary the National Register on a temporary basis to take account of a reportable event in relation to the entity: (i) details of the reportable event; and (ii) a statement that the variation is temporary.
For the purposes of paragraph 40(1)(b) of the Act, this Division prescribes entities to be exempt entities.
(1) A law enforcement agency is an exempt entity in relation to a security‑sensitive biological agent if the agency: (a) handles the security‑sensitive biological agent only in the course of carrying out a function of the agency under a law of the Commonwealth, or of a State or Territory; and (b) does not handle the security‑sensitive biological agent for the purpose of using it as a control sample for testing or carrying out diagnostic analysis. (2) Each of the following is a law enforcement agency: (a) the Australian Federal Police; (b) a police force of a State or Territory; (c) the Department administered by the Minister administering Part 1 of Chapter 8 of the Biosecurity Act 2015; (d) the Department administered by the Minister administering Part XII of the Customs Act 1901.
(1) An entity that holds: (a) a depot licence (within the meaning of Part IVA of the Customs Act 1901); or (b) a warehouse licence (within the meaning of Part V of that Act); is an exempt entity in relation to a security‑sensitive biological agent if the entity handles the security‑sensitive biological agent only in accordance with the licence. (2) An entity that is permitted or required to do something under: (a) paragraphs 77VA(2)(a) to (d) of the Customs Act 1901; or (b) paragraphs 86(7)(a) to (d) of that Act; is an exempt entity in relation to a security‑sensitive biological agent if the entity handles the security‑sensitive biological agent only in accordance with that permission or requirement.
Persons affected by security‑sensitive biological agents (1) A person who is affected by a security‑sensitive biological agent is an exempt entity in relation to that security‑sensitive biological agent while the person is affected by it. Providing treatment to affected persons or animals (2) An entity that provides treatment to a person or animal is an exempt entity in relation to a security‑sensitive biological agent if: (a) the person or animal is or has been affected by the security‑sensitive biological agent; and (b) the entity handles the security‑sensitive biological agent only while: (i) the security‑sensitive biological agent is in the body of the person or animal; or (ii) taking a sample from the person or animal for the purposes of the treatment. Destroying affected animals (3) An entity that destroys an animal is an exempt entity in relation to a security‑sensitive biological agent if: (a) the animal is affected by the security‑sensitive biological agent; and (b) the entity destroys the animal because the animal is affected by the security‑sensitive biological agent; and (c) the entity handles the security‑sensitive biological agent only in the course of destroying the animal. Handling of bodies of affected deceased persons (4) An entity that has the function of: (a) examining, identifying, storing, transporting, burying or cremating the bodies of deceased persons; or (b) preparing the bodies of deceased persons for burial or cremation; is an exempt entity in relation to a security‑sensitive biological agent if: (c) a deceased person was affected by the security‑sensitive biological agent before the person’s death; and (d) the entity handles the security‑sensitive biological agent only in the course of carrying out a function mentioned in paragraph (a) or (b) in relation to the person’s body.
An entity that has the function of handling mice to test for the presence of botulinum toxin is an exempt entity in relation to botulinum toxin if the entity: (a) handles the botulinum toxin only in the course of carrying out that function; and (b) does not handle the botulinum toxin for the purpose of using it as a control sample for testing or carrying out diagnostic analysis.
(1) This section applies if: (a) a security‑sensitive biological agent is included in the National Register in relation to an entity and a facility; and (b) a person at the facility enters a place where the security‑sensitive biological agent is handled. (2) For the purposes of paragraph 48(1)(g) of the Act, access by the person to the security‑sensitive biological agent at that place is unauthorised if: (a) the person is neither: (i) authorised by the entity, in accordance with Part 3 of the SSBA Standards, to enter the place; nor (ii) approved by the entity, in accordance with Part 3 of the SSBA Standards, to enter the place; or (b) the person is so authorised or approved, but the person enters the place other than in accordance with the authorisation or approval.
For the purposes of paragraph 48(1)(h) of the Act, this Subdivision prescribes events in relation to registered entities.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity transfers the security‑sensitive biological agent from the facility to another facility of the entity; and (c) the security‑sensitive biological agent is received at the other facility; and (d) the entity verifies, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the other facility was successful. (2) The event mentioned in paragraph (1)(d) is a reportable event for the entity.
Note: The event mentioned in paragraph (1)(b) is a reportable event for the entity under subparagraph 48(1)(e)(ii) of the Act.
Transfers to facilities of other entities (3) Subregulation (4) applies if: (a) a registered entity (the sending entity) is included on the National Register in relation to a facility (the sending facility) and a security‑sensitive biological agent; and (b) another registered entity (the receiving entity) is included on the National Register in relation to another facility (the receiving facility) and the same security‑sensitive biological agent; and (c) the sending entity transfers the security‑sensitive biological agent from the sending facility to the receiving facility; and (d) the security‑sensitive biological agent is received at the receiving facility; and (e) the receiving entity verifies, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the receiving facility was successful. (4) The event mentioned in paragraph (3)(e) is a reportable event for the receiving entity.
Note: The event mentioned in paragraph (3)(c) is a reportable event for the sending entity under subparagraph 48(1)(e)(i) of the Act.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity transfers the security‑sensitive biological agent from the facility to another facility of the entity; and (c) the security‑sensitive biological agent is received at the other facility; and (d) the entity is unable to verify, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the other facility was successful. (2) The event mentioned in paragraph (1)(d) is a reportable event for the entity.
Note: The event mentioned in paragraph (1)(b) is a reportable event for the entity under subparagraph 48(1)(e)(ii) of the Act.
Transfers to facilities of other entities (3) Subregulation (4) applies if: (a) a registered entity (the sending entity) is included on the National Register in relation to a facility (the sending facility) and a security‑sensitive biological agent; and (b) another registered entity (the receiving entity) is included on the National Register in relation to another facility (the receiving facility) and the same security‑sensitive biological agent; and (c) the sending entity transfers the security‑sensitive biological agent from the sending facility to the receiving facility; and (d) the security‑sensitive biological agent is received at the receiving facility; and (e) the receiving entity is unable to verify, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological to the receiving facility was successful. (4) The event mentioned in paragraph (3)(e) is a reportable event for the receiving entity.
Note: The event mentioned in paragraph (3)(c) is a reportable event for the sending entity under subparagraph 48(1)(e)(i) of the Act.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity arranges for the transfer of the security‑sensitive biological agent from the facility to another facility of the entity; and (c) the entity notifies the other facility, in accordance with Part 6 of the SSBA Standards, of the expected time of delivery of the security‑sensitive biological agent to the other facility; and (d) the security‑sensitive biological agent is not received at the other facility by the notified expected time of delivery. (2) The event mentioned in paragraph (1)(d) is a reportable event for the entity.
Note 1: Transferring the security‑sensitive biological agent is a reportable event for the entity under subparagraph 48(1)(e)(ii) of the Act.
Note 2: Loss or theft of the security‑sensitive biological agent is a reportable event for the entity under paragraph 48(1)(f) of the Act.
(3) Subsection (2) does not apply if: (a) the security‑sensitive agent is received at the other facility within 2 business days after the notified expected time of delivery; and (b) at all times between the notified expected time of delivery and the receiving of the security‑sensitive biological agent, the entity knows that the security‑sensitive biological agent is not lost or stolen. Transfers to facilities of other entities (4) Subregulation (5) applies if: (a) a registered entity (the sending entity) is included on the National Register in relation to a facility (the sending facility) and a security‑sensitive biological agent; and (b) another registered entity (the receiving entity) is included on the National Register in relation to another facility (the receiving facility) and the same security‑sensitive biological agent; and (c) the sending entity arranges with the receiving entity for the transfer of the security‑sensitive biological agent from the sending facility to the receiving facility; and (d) the sending entity notifies the receiving entity, in accordance with Part 6 of the SSBA Standards, of the expected time of delivery of the security‑sensitive biological agent to the receiving facility; and (e) the security‑sensitive biological agent is not received at the receiving facility by the notified expected time of delivery. (5) The event mentioned in paragraph (4)(e) is a reportable event for the receiving entity.
Note 1: Transferring the security‑sensitive biological agent is a reportable event for the sending entity under subparagraph 48(1)(e)(i) of the Act.
Note 2: Loss or theft of the security‑sensitive biological agent is a reportable event for the sending entity under paragraph 48(1)(f) of the Act.
(6) Subsection (5) does not apply if: (a) the security‑sensitive agent is received at the receiving facility within 2 business days after the notified expected time of delivery; and (b) at all times between the notified expected time of delivery and the receiving of the security‑sensitive biological agent, the receiving entity knows that the security‑sensitive biological agent is not lost or stolen.
An event mentioned in column 1 of an item of the following table is prescribed in relation to a registered entity that is included on the National Register in relation to a facility and a security‑sensitive biological agent, if: (a) there are no circumstances mentioned in column 2 of the item; or (b) the circumstances mentioned in column 2 of the item exist.
<table cellspacing="0" cellpadding="0" style="width:100%; border-collapse:collapse"><thead><tr><td colspan="3" style="border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Reportable events</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Item</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 1</span></p><p class="TableHeading"><span>Event</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 2</span></p><p class="TableHeading"><span>Circumstances</span></p></td></tr></thead><tbody><tr><td style="width:7.86%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>1</span></p></td><td style="width:42.78%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person handles the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the handling is not in accordance with the authorisation or approval</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to handle the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the attempt is not in accordance with the authorisation or approval</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>3</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to access the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the access is unauthorised under section</span><span> </span><span>13</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>4</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to steal the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>none</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>5</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the security</span><span>‑</span><span>sensitive biological agent is accidentally released during its handling at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>none</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>6</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person who has been to the facility is affected by the security</span><span>‑</span><span>sensitive biological agent as a result of the entity’s handling of the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>none</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>7</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person accesses sensitive information at the facility about the security</span><span>‑</span><span>sensitive biological agent</span></p><p class="notemargin"><span>Note:</span><span style="width:15.45pt; text-indent:0pt; display:inline-block"> </span><span>For </span><span style="font-weight:bold; font-style:italic">sensitive information,</span><span> see section</span><span> </span><span>5.</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the access is not in accordance with the authorisation or approval</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>8</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to access sensitive information at the facility about the security</span><span>‑</span><span>sensitive biological agent</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the access is not in accordance with the authorisation or approval</span></p></td></tr></tbody></table>
The following events are prescribed in relation to a registered entity: (a) a change to any of the following: (i) the entity’s name; (ii) if the entity’s head office is located at a place other than a facility where the entity handles security‑sensitive biological agents—the address of the entity’s head office, or the entity’s postal address; (iii) the entity’s telephone number, fax number or email address; (iv) the entity’s ABN, ACN or ARBN; (b) any of the following events in relation to a facility where the entity handles security‑sensitive biological agents: (i) a change to the name, location or fax number of the facility; (ii) a change to the telephone number, after hours telephone number or email address of the Responsible Officer or the Deputy Responsible Officer for the facility; (iii) the Responsible Officer for the facility ceases to be the Responsible Officer; (iv) the Deputy Responsible Officer for the facility ceases to be the Deputy Responsible Officer; (v) a Responsible Officer or Deputy Responsible Officer is appointed for the facility.
For the purposes of subsection 48(3) of the Act, a registered entity that must give a report about a reportable event mentioned in column 1 of an item of the following table must give the report within the period mentioned in column 2 of the item.
<table cellspacing="0" cellpadding="0" style="width:100%; border-collapse:collapse"><thead><tr><td colspan="3" style="border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>When reports must be given</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Item</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 1</span></p><p class="TableHeading"><span>For a reportable event mentioned in …</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 2</span></p><p class="TableHeading"><span>the report must be given within …</span></p></td></tr></thead><tbody><tr><td style="width:7.68%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>1</span></p></td><td style="width:48.68%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>paragraph</span><span> </span><span>48(1)(a) of the Act (entity starts to handle a security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity starts to handle the security</span><span>‑</span><span>sensitive biological agent.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) paragraph</span><span> </span><span>48(1)(b) of the Act (entity disposes of its entire holdings of a security</span><span>‑</span><span>sensitive biological agent); or</span></p><p class="Tablea"><span>(b) paragraph</span><span> </span><span>48(1)(c) of the Act (disposal of toxins resulting in less than a reportable quantity)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>3</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>subparagraph</span><span> </span><span>48(1)(d)(i) of the Act (entity starts to handle a security</span><span>‑</span><span>sensitive biological agent for a purpose not specified in the National Register)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity starts to handle the security</span><span>‑</span><span>sensitive biological agent for that purpose.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>4</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>subparagraph</span><span> </span><span>48(1)(d)(ii) of the Act (entity stops handling a security</span><span>‑</span><span>sensitive biological agent for a purpose specified in the National Register)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity stops handling the security</span><span>‑</span><span>sensitive biological agent for that purpose.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>5</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>paragraph</span><span> </span><span>48(1)(e) of the Act (entity transfers a security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>6</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) paragraph</span><span> </span><span>48(1)(f) of the Act (security</span><span>‑</span><span>sensitive biological agent is lost or stolen); or</span></p><p class="Tablea"><span>(b) paragraph</span><span> </span><span>48(1)(g) of the Act (unauthorised access to a security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity becomes aware of the event.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>7</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>section</span><span> </span><span>15, 16 or 17 of this instrument (transfer of security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>8</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>section</span><span> </span><span>18 of this instrument (unauthorised handling etc.)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity becomes aware of the event.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>9</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>section</span><span> </span><span>19 of this instrument (change in particulars)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr></tbody></table>
(1) For the purposes of paragraph 48A(1)(b) of the Act, the following reportable events are prescribed: (a) the event mentioned in paragraph 48(1)(g) of the Act; (b) the event mentioned in subsection 16(2) or (4) of this instrument; (c) the event mentioned in subsection 17(2) or (5) of this instrument; (d) the event mentioned in column 1 of item 1, 2, 3, 4, 7 or 8 of the table in section 18 of this instrument. (2) For the purposes of subsection 48A(3) of the Act, the period is the period of 24 hours after the registered entity becomes aware of the event.
For the purposes of subparagraph 60AF(1)(b)(ii) of the Act, access is unauthorised if the access does not comply with Part 10 of the SSBA Standards.
When reports must be given to Secretary (1) For the purposes of subsection 60AF(2) of the Act, the period is the period of 2 business days after the entity becomes aware of the event. When reports must be given to police (2) For the purposes of subsection 60AH(3) of the Act, the period is the period of 24 hours after the entity becomes aware of the event.
For the purposes of paragraph 64(2)(a) of the Act, an identity card issued to an inspector must contain the following: (a) the full name of the inspector; (b) a statement that the person to whom the card is issued is appointed under subsection 63(1) of the Act; (c) for the photograph required under paragraph 64(2)(b) of the Act, an image showing the inspector’s full face, head and shoulders; (d) the date the card was issued; (e) the date the card expires.
Note: Paragraph 64(2)(b) of the Act provides that an identity card issued to an inspector must contain a recent photograph of the inspector.
Intelligence agency (1) For the purposes of paragraph 85(1)(a) of the Act, the Australian Security Intelligence Organisation is prescribed. Law enforcement agencies (2) For the purposes of paragraph 85(1)(b) of the Act, the following law enforcement agencies are prescribed: (a) the Australian Federal Police; (b) the police force of a State or Territory.
For the purposes of paragraph 37(f) of the Act, the following particulars are prescribed in relation to an entity: (a) if the entity’s head office is located at a place other than a facility where the entity handles security‑sensitive biological agents: (i) the address of the entity’s head office; and (ii) the entity’s postal address; (b) the entity’s telephone number, fax number and email address; (c) if the entity has an ABN, ACN or ARBN—those details; (d) for each facility where the entity handles security‑sensitive biological agents: (i) the geographic coordinates of the facility, expressed in terms of the Geocentric Datum of Australia 1994; and (ii) the fax number of the facility; and (iii) the name, telephone number, after hours telephone number and email address of the Responsible Officer for the facility; and (iv) the name, telephone number, after hours telephone number and email address of the Deputy Responsible Officer for the facility; (e) if the Secretary decides under section 49 of the Act to vary the National Register to take account of a reportable event in relation to the entity—details of the reportable event; (f) if the Secretary decides under subsection 52(2) of the Act to vary the National Register on a temporary basis to take account of a reportable event in relation to the entity: (i) details of the reportable event; and (ii) a statement that the variation is temporary.
This instrument is the National Health Security Regulations 2018.
This instrument is made under the National Health Security Act 2007.
Note: A number of expressions used in this instrument are defined in the Act, including the following:
(a) entity;
(b) facility;
(c) handling;
(d) registered entity;
(e) security‑sensitive biological agent;
(f) SSBA;
(g) SSBA Standards.
In this instrument:
ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.
Note: ABN is short for Australian Business Number.
ACN has the same meaning as in the Corporations Act 2001.
Note: ACN is short for Australian Company Number.
Act means the National Health Security Act 2007.
affected: the body of a person or animal is affected by a security‑sensitive biological agent if the security‑sensitive biological agent has been introduced into the body.
ARBN has the same meaning as in the Corporations Act 2001.
Note: ARBN is short for Australian Registered Body Number.
Deputy Responsible Officer has the same meaning as in the SSBA Standards.
Geocentric Datum of Australia 1994 means the Geocentric Datum of Australia as defined in Gazette No. GN 35 of 6 September 1995, as existing when this instrument commences.
law enforcement agency has the meaning given by subsection 9(2).
Responsible Officer has the same meaning as in the SSBA Standards.
sensitive information, in relation to a security‑sensitive biological agent that an entity handles at a facility, means any of the following:
(a) the entity’s storage records for the agent;
(b) the entity’s risk assessment plan for the agent;
(c) the entity’s risk management plan for the agent;
(d) any information:
(i) that the entity holds; and
(ii) disclosure of which could compromise the security of the agent.
For the purposes of paragraph 23(2)(b) of the Act, each of the following intelligence agencies is prescribed: (a) the Australian Federal Police; (b) the Australian Security Intelligence Organisation.
For the purposes of paragraph 37(f) of the Act, the following particulars are prescribed in relation to an entity: (a) if the entity’s head office is located at a place other than a facility where the entity handles security‑sensitive biological agents: (i) the address of the entity’s head office; and (ii) the entity’s postal address; (b) the entity’s telephone number, fax number and email address; (c) if the entity has an ABN, ACN or ARBN—those details; (d) for each facility where the entity handles security‑sensitive biological agents: (i) the geographic coordinates of the facility, expressed in terms of the Geocentric Datum of Australia 1994; and (ii) the fax number of the facility; and (iii) the name, telephone number, after hours telephone number and email address of the Responsible Officer for the facility; and (iv) the name, telephone number, after hours telephone number and email address of the Deputy Responsible Officer for the facility; (e) if the Secretary decides under section 49 of the Act to vary the National Register to take account of a reportable event in relation to the entity—details of the reportable event; (f) if the Secretary decides under subsection 52(2) of the Act to vary the National Register on a temporary basis to take account of a reportable event in relation to the entity: (i) details of the reportable event; and (ii) a statement that the variation is temporary.
For the purposes of paragraph 40(1)(b) of the Act, this Division prescribes entities to be exempt entities.
(1) A law enforcement agency is an exempt entity in relation to a security‑sensitive biological agent if the agency: (a) handles the security‑sensitive biological agent only in the course of carrying out a function of the agency under a law of the Commonwealth, or of a State or Territory; and (b) does not handle the security‑sensitive biological agent for the purpose of using it as a control sample for testing or carrying out diagnostic analysis. (2) Each of the following is a law enforcement agency: (a) the Australian Federal Police; (b) a police force of a State or Territory; (c) the Department administered by the Minister administering Part 1 of Chapter 8 of the Biosecurity Act 2015; (d) the Department administered by the Minister administering Part XII of the Customs Act 1901.
(1) An entity that holds: (a) a depot licence (within the meaning of Part IVA of the Customs Act 1901); or (b) a warehouse licence (within the meaning of Part V of that Act); is an exempt entity in relation to a security‑sensitive biological agent if the entity handles the security‑sensitive biological agent only in accordance with the licence. (2) An entity that is permitted or required to do something under: (a) paragraphs 77VA(2)(a) to (d) of the Customs Act 1901; or (b) paragraphs 86(7)(a) to (d) of that Act; is an exempt entity in relation to a security‑sensitive biological agent if the entity handles the security‑sensitive biological agent only in accordance with that permission or requirement.
Persons affected by security‑sensitive biological agents (1) A person who is affected by a security‑sensitive biological agent is an exempt entity in relation to that security‑sensitive biological agent while the person is affected by it. Providing treatment to affected persons or animals (2) An entity that provides treatment to a person or animal is an exempt entity in relation to a security‑sensitive biological agent if: (a) the person or animal is or has been affected by the security‑sensitive biological agent; and (b) the entity handles the security‑sensitive biological agent only while: (i) the security‑sensitive biological agent is in the body of the person or animal; or (ii) taking a sample from the person or animal for the purposes of the treatment. Destroying affected animals (3) An entity that destroys an animal is an exempt entity in relation to a security‑sensitive biological agent if: (a) the animal is affected by the security‑sensitive biological agent; and (b) the entity destroys the animal because the animal is affected by the security‑sensitive biological agent; and (c) the entity handles the security‑sensitive biological agent only in the course of destroying the animal. Handling of bodies of affected deceased persons (4) An entity that has the function of: (a) examining, identifying, storing, transporting, burying or cremating the bodies of deceased persons; or (b) preparing the bodies of deceased persons for burial or cremation; is an exempt entity in relation to a security‑sensitive biological agent if: (c) a deceased person was affected by the security‑sensitive biological agent before the person’s death; and (d) the entity handles the security‑sensitive biological agent only in the course of carrying out a function mentioned in paragraph (a) or (b) in relation to the person’s body.
An entity that has the function of handling mice to test for the presence of botulinum toxin is an exempt entity in relation to botulinum toxin if the entity: (a) handles the botulinum toxin only in the course of carrying out that function; and (b) does not handle the botulinum toxin for the purpose of using it as a control sample for testing or carrying out diagnostic analysis.
(1) This section applies if: (a) a security‑sensitive biological agent is included in the National Register in relation to an entity and a facility; and (b) a person at the facility enters a place where the security‑sensitive biological agent is handled. (2) For the purposes of paragraph 48(1)(g) of the Act, access by the person to the security‑sensitive biological agent at that place is unauthorised if: (a) the person is neither: (i) authorised by the entity, in accordance with Part 3 of the SSBA Standards, to enter the place; nor (ii) approved by the entity, in accordance with Part 3 of the SSBA Standards, to enter the place; or (b) the person is so authorised or approved, but the person enters the place other than in accordance with the authorisation or approval.
For the purposes of paragraph 48(1)(h) of the Act, this Subdivision prescribes events in relation to registered entities.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity transfers the security‑sensitive biological agent from the facility to another facility of the entity; and (c) the security‑sensitive biological agent is received at the other facility; and (d) the entity verifies, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the other facility was successful. (2) The event mentioned in paragraph (1)(d) is a reportable event for the entity.
Note: The event mentioned in paragraph (1)(b) is a reportable event for the entity under subparagraph 48(1)(e)(ii) of the Act.
Transfers to facilities of other entities (3) Subregulation (4) applies if: (a) a registered entity (the sending entity) is included on the National Register in relation to a facility (the sending facility) and a security‑sensitive biological agent; and (b) another registered entity (the receiving entity) is included on the National Register in relation to another facility (the receiving facility) and the same security‑sensitive biological agent; and (c) the sending entity transfers the security‑sensitive biological agent from the sending facility to the receiving facility; and (d) the security‑sensitive biological agent is received at the receiving facility; and (e) the receiving entity verifies, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the receiving facility was successful. (4) The event mentioned in paragraph (3)(e) is a reportable event for the receiving entity.
Note: The event mentioned in paragraph (3)(c) is a reportable event for the sending entity under subparagraph 48(1)(e)(i) of the Act.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity transfers the security‑sensitive biological agent from the facility to another facility of the entity; and (c) the security‑sensitive biological agent is received at the other facility; and (d) the entity is unable to verify, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the other facility was successful. (2) The event mentioned in paragraph (1)(d) is a reportable event for the entity.
Note: The event mentioned in paragraph (1)(b) is a reportable event for the entity under subparagraph 48(1)(e)(ii) of the Act.
Transfers to facilities of other entities (3) Subregulation (4) applies if: (a) a registered entity (the sending entity) is included on the National Register in relation to a facility (the sending facility) and a security‑sensitive biological agent; and (b) another registered entity (the receiving entity) is included on the National Register in relation to another facility (the receiving facility) and the same security‑sensitive biological agent; and (c) the sending entity transfers the security‑sensitive biological agent from the sending facility to the receiving facility; and (d) the security‑sensitive biological agent is received at the receiving facility; and (e) the receiving entity is unable to verify, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological to the receiving facility was successful. (4) The event mentioned in paragraph (3)(e) is a reportable event for the receiving entity.
Note: The event mentioned in paragraph (3)(c) is a reportable event for the sending entity under subparagraph 48(1)(e)(i) of the Act.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity arranges for the transfer of the security‑sensitive biological agent from the facility to another facility of the entity; and (c) the entity notifies the other facility, in accordance with Part 6 of the SSBA Standards, of the expected time of delivery of the security‑sensitive biological agent to the other facility; and (d) the security‑sensitive biological agent is not received at the other facility by the notified expected time of delivery. (2) The event mentioned in paragraph (1)(d) is a reportable event for the entity.
Note 1: Transferring the security‑sensitive biological agent is a reportable event for the entity under subparagraph 48(1)(e)(ii) of the Act.
Note 2: Loss or theft of the security‑sensitive biological agent is a reportable event for the entity under paragraph 48(1)(f) of the Act.
(3) Subsection (2) does not apply if: (a) the security‑sensitive agent is received at the other facility within 2 business days after the notified expected time of delivery; and (b) at all times between the notified expected time of delivery and the receiving of the security‑sensitive biological agent, the entity knows that the security‑sensitive biological agent is not lost or stolen. Transfers to facilities of other entities (4) Subregulation (5) applies if: (a) a registered entity (the sending entity) is included on the National Register in relation to a facility (the sending facility) and a security‑sensitive biological agent; and (b) another registered entity (the receiving entity) is included on the National Register in relation to another facility (the receiving facility) and the same security‑sensitive biological agent; and (c) the sending entity arranges with the receiving entity for the transfer of the security‑sensitive biological agent from the sending facility to the receiving facility; and (d) the sending entity notifies the receiving entity, in accordance with Part 6 of the SSBA Standards, of the expected time of delivery of the security‑sensitive biological agent to the receiving facility; and (e) the security‑sensitive biological agent is not received at the receiving facility by the notified expected time of delivery. (5) The event mentioned in paragraph (4)(e) is a reportable event for the receiving entity.
Note 1: Transferring the security‑sensitive biological agent is a reportable event for the sending entity under subparagraph 48(1)(e)(i) of the Act.
Note 2: Loss or theft of the security‑sensitive biological agent is a reportable event for the sending entity under paragraph 48(1)(f) of the Act.
(6) Subsection (5) does not apply if: (a) the security‑sensitive agent is received at the receiving facility within 2 business days after the notified expected time of delivery; and (b) at all times between the notified expected time of delivery and the receiving of the security‑sensitive biological agent, the receiving entity knows that the security‑sensitive biological agent is not lost or stolen.
An event mentioned in column 1 of an item of the following table is prescribed in relation to a registered entity that is included on the National Register in relation to a facility and a security‑sensitive biological agent, if: (a) there are no circumstances mentioned in column 2 of the item; or (b) the circumstances mentioned in column 2 of the item exist.
<table cellspacing="0" cellpadding="0" style="width:100%; border-collapse:collapse"><thead><tr><td colspan="3" style="border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Reportable events</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Item</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 1</span></p><p class="TableHeading"><span>Event</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 2</span></p><p class="TableHeading"><span>Circumstances</span></p></td></tr></thead><tbody><tr><td style="width:7.86%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>1</span></p></td><td style="width:42.78%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person handles the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the handling is not in accordance with the authorisation or approval</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to handle the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to handle the security</span><span>‑</span><span>sensitive biological agent at the facility; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the attempt is not in accordance with the authorisation or approval</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>3</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to access the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the access is unauthorised under section</span><span> </span><span>13</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>4</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to steal the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>none</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>5</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the security</span><span>‑</span><span>sensitive biological agent is accidentally released during its handling at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>none</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>6</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person who has been to the facility is affected by the security</span><span>‑</span><span>sensitive biological agent as a result of the entity’s handling of the security</span><span>‑</span><span>sensitive biological agent at the facility</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>none</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>7</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person accesses sensitive information at the facility about the security</span><span>‑</span><span>sensitive biological agent</span></p><p class="notemargin"><span>Note:</span><span style="width:15.45pt; text-indent:0pt; display:inline-block"> </span><span>For </span><span style="font-weight:bold; font-style:italic">sensitive information,</span><span> see section</span><span> </span><span>5.</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the access is not in accordance with the authorisation or approval</span></p></td></tr><tr><td style="width:7.86%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>8</span></p></td><td style="width:42.78%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>a person attempts to access sensitive information at the facility about the security</span><span>‑</span><span>sensitive biological agent</span></p></td><td style="width:49.36%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) the person is neither:</span></p><p class="Tablei"><span>(i) authorised by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; nor</span></p><p class="Tablei"><span>(ii) approved by the entity, in accordance with Part</span><span> </span><span>3 of the SSBA Standards, to access the information; or</span></p><p class="Tablea"><span>(b) the person is so authorised or approved, but the access is not in accordance with the authorisation or approval</span></p></td></tr></tbody></table>
The following events are prescribed in relation to a registered entity: (a) a change to any of the following: (i) the entity’s name; (ii) if the entity’s head office is located at a place other than a facility where the entity handles security‑sensitive biological agents—the address of the entity’s head office, or the entity’s postal address; (iii) the entity’s telephone number, fax number or email address; (iv) the entity’s ABN, ACN or ARBN; (b) any of the following events in relation to a facility where the entity handles security‑sensitive biological agents: (i) a change to the name, location or fax number of the facility; (ii) a change to the telephone number, after hours telephone number or email address of the Responsible Officer or the Deputy Responsible Officer for the facility; (iii) the Responsible Officer for the facility ceases to be the Responsible Officer; (iv) the Deputy Responsible Officer for the facility ceases to be the Deputy Responsible Officer; (v) a Responsible Officer or Deputy Responsible Officer is appointed for the facility.
For the purposes of subsection 48(3) of the Act, a registered entity that must give a report about a reportable event mentioned in column 1 of an item of the following table must give the report within the period mentioned in column 2 of the item.
<table cellspacing="0" cellpadding="0" style="width:100%; border-collapse:collapse"><thead><tr><td colspan="3" style="border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>When reports must be given</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Item</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 1</span></p><p class="TableHeading"><span>For a reportable event mentioned in …</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 2</span></p><p class="TableHeading"><span>the report must be given within …</span></p></td></tr></thead><tbody><tr><td style="width:7.68%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>1</span></p></td><td style="width:48.68%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>paragraph</span><span> </span><span>48(1)(a) of the Act (entity starts to handle a security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity starts to handle the security</span><span>‑</span><span>sensitive biological agent.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) paragraph</span><span> </span><span>48(1)(b) of the Act (entity disposes of its entire holdings of a security</span><span>‑</span><span>sensitive biological agent); or</span></p><p class="Tablea"><span>(b) paragraph</span><span> </span><span>48(1)(c) of the Act (disposal of toxins resulting in less than a reportable quantity)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>3</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>subparagraph</span><span> </span><span>48(1)(d)(i) of the Act (entity starts to handle a security</span><span>‑</span><span>sensitive biological agent for a purpose not specified in the National Register)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity starts to handle the security</span><span>‑</span><span>sensitive biological agent for that purpose.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>4</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>subparagraph</span><span> </span><span>48(1)(d)(ii) of the Act (entity stops handling a security</span><span>‑</span><span>sensitive biological agent for a purpose specified in the National Register)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity stops handling the security</span><span>‑</span><span>sensitive biological agent for that purpose.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>5</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>paragraph</span><span> </span><span>48(1)(e) of the Act (entity transfers a security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>6</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a) paragraph</span><span> </span><span>48(1)(f) of the Act (security</span><span>‑</span><span>sensitive biological agent is lost or stolen); or</span></p><p class="Tablea"><span>(b) paragraph</span><span> </span><span>48(1)(g) of the Act (unauthorised access to a security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity becomes aware of the event.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>7</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>section</span><span> </span><span>15, 16 or 17 of this instrument (transfer of security</span><span>‑</span><span>sensitive biological agent)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>8</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>section</span><span> </span><span>18 of this instrument (unauthorised handling etc.)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the entity becomes aware of the event.</span></p></td></tr><tr><td style="width:7.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>9</span></p></td><td style="width:48.68%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>section</span><span> </span><span>19 of this instrument (change in particulars)</span></p></td><td style="width:43.64%; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2 business days after the event occurs.</span></p></td></tr></tbody></table>
(1) For the purposes of paragraph 48A(1)(b) of the Act, the following reportable events are prescribed: (a) the event mentioned in paragraph 48(1)(g) of the Act; (b) the event mentioned in subsection 16(2) or (4) of this instrument; (c) the event mentioned in subsection 17(2) or (5) of this instrument; (d) the event mentioned in column 1 of item 1, 2, 3, 4, 7 or 8 of the table in section 18 of this instrument. (2) For the purposes of subsection 48A(3) of the Act, the period is the period of 24 hours after the registered entity becomes aware of the event.
For the purposes of subparagraph 60AF(1)(b)(ii) of the Act, access is unauthorised if the access does not comply with Part 10 of the SSBA Standards.
When reports must be given to Secretary (1) For the purposes of subsection 60AF(2) of the Act, the period is the period of 2 business days after the entity becomes aware of the event. When reports must be given to police (2) For the purposes of subsection 60AH(3) of the Act, the period is the period of 24 hours after the entity becomes aware of the event.
For the purposes of paragraph 64(2)(a) of the Act, an identity card issued to an inspector must contain the following: (a) the full name of the inspector; (b) a statement that the person to whom the card is issued is appointed under subsection 63(1) of the Act; (c) for the photograph required under paragraph 64(2)(b) of the Act, an image showing the inspector’s full face, head and shoulders; (d) the date the card was issued; (e) the date the card expires.
Note: Paragraph 64(2)(b) of the Act provides that an identity card issued to an inspector must contain a recent photograph of the inspector.
Intelligence agency (1) For the purposes of paragraph 85(1)(a) of the Act, the Australian Security Intelligence Organisation is prescribed. Law enforcement agencies (2) For the purposes of paragraph 85(1)(b) of the Act, the following law enforcement agencies are prescribed: (a) the Australian Federal Police; (b) the police force of a State or Territory.
For the purposes of paragraph 40(1)(b) of the Act, this Division prescribes entities to be exempt entities.
(1) A law enforcement agency is an exempt entity in relation to a security‑sensitive biological agent if the agency: (a) handles the security‑sensitive biological agent only in the course of carrying out a function of the agency under a law of the Commonwealth, or of a State or Territory; and (b) does not handle the security‑sensitive biological agent for the purpose of using it as a control sample for testing or carrying out diagnostic analysis. (2) Each of the following is a law enforcement agency: (a) the Australian Federal Police; (b) a police force of a State or Territory; (c) the Department administered by the Minister administering Part 1 of Chapter 8 of the Biosecurity Act 2015; (d) the Department administered by the Minister administering Part XII of the Customs Act 1901.
(1) An entity that holds: (a) a depot licence (within the meaning of Part IVA of the Customs Act 1901); or (b) a warehouse licence (within the meaning of Part V of that Act); is an exempt entity in relation to a security‑sensitive biological agent if the entity handles the security‑sensitive biological agent only in accordance with the licence. (2) An entity that is permitted or required to do something under: (a) paragraphs 77VA(2)(a) to (d) of the Customs Act 1901; or (b) paragraphs 86(7)(a) to (d) of that Act; is an exempt entity in relation to a security‑sensitive biological agent if the entity handles the security‑sensitive biological agent only in accordance with that permission or requirement.
Persons affected by security‑sensitive biological agents (1) A person who is affected by a security‑sensitive biological agent is an exempt entity in relation to that security‑sensitive biological agent while the person is affected by it. Providing treatment to affected persons or animals (2) An entity that provides treatment to a person or animal is an exempt entity in relation to a security‑sensitive biological agent if: (a) the person or animal is or has been affected by the security‑sensitive biological agent; and (b) the entity handles the security‑sensitive biological agent only while: (i) the security‑sensitive biological agent is in the body of the person or animal; or (ii) taking a sample from the person or animal for the purposes of the treatment. Destroying affected animals (3) An entity that destroys an animal is an exempt entity in relation to a security‑sensitive biological agent if: (a) the animal is affected by the security‑sensitive biological agent; and (b) the entity destroys the animal because the animal is affected by the security‑sensitive biological agent; and (c) the entity handles the security‑sensitive biological agent only in the course of destroying the animal. Handling of bodies of affected deceased persons (4) An entity that has the function of: (a) examining, identifying, storing, transporting, burying or cremating the bodies of deceased persons; or (b) preparing the bodies of deceased persons for burial or cremation; is an exempt entity in relation to a security‑sensitive biological agent if: (c) a deceased person was affected by the security‑sensitive biological agent before the person’s death; and (d) the entity handles the security‑sensitive biological agent only in the course of carrying out a function mentioned in paragraph (a) or (b) in relation to the person’s body.
An entity that has the function of handling mice to test for the presence of botulinum toxin is an exempt entity in relation to botulinum toxin if the entity: (a) handles the botulinum toxin only in the course of carrying out that function; and (b) does not handle the botulinum toxin for the purpose of using it as a control sample for testing or carrying out diagnostic analysis.
Sourced from the Federal Register of Legislation (legislation.gov.au), CC BY 4.0.
This instrument is the National Health Security Regulations 2018.
This instrument is made under the National Health Security Act 2007.
Note: A number of expressions used in this instrument are defined in the Act, including the following:
(a) entity;
(b) facility;
(c) handling;
(d) registered entity;
(e) security‑sensitive biological agent;
(f) SSBA;
(g) SSBA Standards.
In this instrument:
ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.
Note: ABN is short for Australian Business Number.
ACN has the same meaning as in the Corporations Act 2001.
Note: ACN is short for Australian Company Number.
Act means the National Health Security Act 2007.
affected: the body of a person or animal is affected by a security‑sensitive biological agent if the security‑sensitive biological agent has been introduced into the body.
ARBN has the same meaning as in the Corporations Act 2001.
Note: ARBN is short for Australian Registered Body Number.
Deputy Responsible Officer has the same meaning as in the SSBA Standards.
Geocentric Datum of Australia 1994 means the Geocentric Datum of Australia as defined in Gazette No. GN 35 of 6 September 1995, as existing when this instrument commences.
law enforcement agency has the meaning given by subsection 9(2).
Responsible Officer has the same meaning as in the SSBA Standards.
sensitive information, in relation to a security‑sensitive biological agent that an entity handles at a facility, means any of the following:
(a) the entity’s storage records for the agent;
(b) the entity’s risk assessment plan for the agent;
(c) the entity’s risk management plan for the agent;
(d) any information:
(i) that the entity holds; and
(ii) disclosure of which could compromise the security of the agent.
Why it matters (practical effect)
Stated purpose and how the Regulations produce it
Costs, incentives and trade‑offs (concrete mechanisms)
Implementation risks and operational friction
Bottom line (plain)
For the purposes of paragraph 23(2)(b) of the Act, each of the following intelligence agencies is prescribed: (a) the Australian Federal Police; (b) the Australian Security Intelligence Organisation.
This instrument is the National Health Security Regulations 2018.
This instrument is made under the National Health Security Act 2007.
Note: A number of expressions used in this instrument are defined in the Act, including the following:
(a) entity;
(b) facility;
(c) handling;
(d) registered entity;
(e) security‑sensitive biological agent;
(f) SSBA;
(g) SSBA Standards.
In this instrument:
ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.
Note: ABN is short for Australian Business Number.
ACN has the same meaning as in the Corporations Act 2001.
Note: ACN is short for Australian Company Number.
Act means the National Health Security Act 2007.
affected: the body of a person or animal is affected by a security‑sensitive biological agent if the security‑sensitive biological agent has been introduced into the body.
ARBN has the same meaning as in the Corporations Act 2001.
Note: ARBN is short for Australian Registered Body Number.
Deputy Responsible Officer has the same meaning as in the SSBA Standards.
Geocentric Datum of Australia 1994 means the Geocentric Datum of Australia as defined in Gazette No. GN 35 of 6 September 1995, as existing when this instrument commences.
law enforcement agency has the meaning given by subsection 9(2).
Responsible Officer has the same meaning as in the SSBA Standards.
sensitive information, in relation to a security‑sensitive biological agent that an entity handles at a facility, means any of the following:
(a) the entity’s storage records for the agent;
(b) the entity’s risk assessment plan for the agent;
(c) the entity’s risk management plan for the agent;
(d) any information:
(i) that the entity holds; and
(ii) disclosure of which could compromise the security of the agent.
For the purposes of paragraph 23(2)(b) of the Act, each of the following intelligence agencies is prescribed: (a) the Australian Federal Police; (b) the Australian Security Intelligence Organisation.
For the purposes of paragraph 37(f) of the Act, the following particulars are prescribed in relation to an entity: (a) if the entity’s head office is located at a place other than a facility where the entity handles security‑sensitive biological agents: (i) the address of the entity’s head office; and (ii) the entity’s postal address; (b) the entity’s telephone number, fax number and email address; (c) if the entity has an ABN, ACN or ARBN—those details; (d) for each facility where the entity handles security‑sensitive biological agents: (i) the geographic coordinates of the facility, expressed in terms of the Geocentric Datum of Australia 1994; and (ii) the fax number of the facility; and (iii) the name, telephone number, after hours telephone number and email address of the Responsible Officer for the facility; and (iv) the name, telephone number, after hours telephone number and email address of the Deputy Responsible Officer for the facility; (e) if the Secretary decides under section 49 of the Act to vary the National Register to take account of a reportable event in relation to the entity—details of the reportable event; (f) if the Secretary decides under subsection 52(2) of the Act to vary the National Register on a temporary basis to take account of a reportable event in relation to the entity: (i) details of the reportable event; and (ii) a statement that the variation is temporary.
For the purposes of paragraph 40(1)(b) of the Act, this Division prescribes entities to be exempt entities.
(1) A law enforcement agency is an exempt entity in relation to a security‑sensitive biological agent if the agency: (a) handles the security‑sensitive biological agent only in the course of carrying out a function of the agency under a law of the Commonwealth, or of a State or Territory; and (b) does not handle the security‑sensitive biological agent for the purpose of using it as a control sample for testing or carrying out diagnostic analysis. (2) Each of the following is a law enforcement agency: (a) the Australian Federal Police; (b) a police force of a State or Territory; (c) the Department administered by the Minister administering Part 1 of Chapter 8 of the Biosecurity Act 2015; (d) the Department administered by the Minister administering Part XII of the Customs Act 1901.
(1) An entity that holds: (a) a depot licence (within the meaning of Part IVA of the Customs Act 1901); or (b) a warehouse licence (within the meaning of Part V of that Act); is an exempt entity in relation to a security‑sensitive biological agent if the entity handles the security‑sensitive biological agent only in accordance with the licence. (2) An entity that is permitted or required to do something under: (a) paragraphs 77VA(2)(a) to (d) of the Customs Act 1901; or (b) paragraphs 86(7)(a) to (d) of that Act; is an exempt entity in relation to a security‑sensitive biological agent if the entity handles the security‑sensitive biological agent only in accordance with that permission or requirement.
Persons affected by security‑sensitive biological agents (1) A person who is affected by a security‑sensitive biological agent is an exempt entity in relation to that security‑sensitive biological agent while the person is affected by it. Providing treatment to affected persons or animals (2) An entity that provides treatment to a person or animal is an exempt entity in relation to a security‑sensitive biological agent if: (a) the person or animal is or has been affected by the security‑sensitive biological agent; and (b) the entity handles the security‑sensitive biological agent only while: (i) the security‑sensitive biological agent is in the body of the person or animal; or (ii) taking a sample from the person or animal for the purposes of the treatment. Destroying affected animals (3) An entity that destroys an animal is an exempt entity in relation to a security‑sensitive biological agent if: (a) the animal is affected by the security‑sensitive biological agent; and (b) the entity destroys the animal because the animal is affected by the security‑sensitive biological agent; and (c) the entity handles the security‑sensitive biological agent only in the course of destroying the animal. Handling of bodies of affected deceased persons (4) An entity that has the function of: (a) examining, identifying, storing, transporting, burying or cremating the bodies of deceased persons; or (b) preparing the bodies of deceased persons for burial or cremation; is an exempt entity in relation to a security‑sensitive biological agent if: (c) a deceased person was affected by the security‑sensitive biological agent before the person’s death; and (d) the entity handles the security‑sensitive biological agent only in the course of carrying out a function mentioned in paragraph (a) or (b) in relation to the person’s body.
An entity that has the function of handling mice to test for the presence of botulinum toxin is an exempt entity in relation to botulinum toxin if the entity: (a) handles the botulinum toxin only in the course of carrying out that function; and (b) does not handle the botulinum toxin for the purpose of using it as a control sample for testing or carrying out diagnostic analysis.
(1) This section applies if: (a) a security‑sensitive biological agent is included in the National Register in relation to an entity and a facility; and (b) a person at the facility enters a place where the security‑sensitive biological agent is handled. (2) For the purposes of paragraph 48(1)(g) of the Act, access by the person to the security‑sensitive biological agent at that place is unauthorised if: (a) the person is neither: (i) authorised by the entity, in accordance with Part 3 of the SSBA Standards, to enter the place; nor (ii) approved by the entity, in accordance with Part 3 of the SSBA Standards, to enter the place; or (b) the person is so authorised or approved, but the person enters the place other than in accordance with the authorisation or approval.
For the purposes of paragraph 48(1)(h) of the Act, this Subdivision prescribes events in relation to registered entities.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity transfers the security‑sensitive biological agent from the facility to another facility of the entity; and (c) the security‑sensitive biological agent is received at the other facility; and (d) the entity verifies, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the other facility was successful. (2) The event mentioned in paragraph (1)(d) is a reportable event for the entity.
Note: The event mentioned in paragraph (1)(b) is a reportable event for the entity under subparagraph 48(1)(e)(ii) of the Act.
Transfers to facilities of other entities (3) Subregulation (4) applies if: (a) a registered entity (the sending entity) is included on the National Register in relation to a facility (the sending facility) and a security‑sensitive biological agent; and (b) another registered entity (the receiving entity) is included on the National Register in relation to another facility (the receiving facility) and the same security‑sensitive biological agent; and (c) the sending entity transfers the security‑sensitive biological agent from the sending facility to the receiving facility; and (d) the security‑sensitive biological agent is received at the receiving facility; and (e) the receiving entity verifies, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the receiving facility was successful. (4) The event mentioned in paragraph (3)(e) is a reportable event for the receiving entity.
Note: The event mentioned in paragraph (3)(c) is a reportable event for the sending entity under subparagraph 48(1)(e)(i) of the Act.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity transfers the security‑sensitive biological agent from the facility to another facility of the entity; and (c) the security‑sensitive biological agent is received at the other facility; and (d) the entity is unable to verify, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological agent to the other facility was successful. (2) The event mentioned in paragraph (1)(d) is a reportable event for the entity.
Note: The event mentioned in paragraph (1)(b) is a reportable event for the entity under subparagraph 48(1)(e)(ii) of the Act.
Transfers to facilities of other entities (3) Subregulation (4) applies if: (a) a registered entity (the sending entity) is included on the National Register in relation to a facility (the sending facility) and a security‑sensitive biological agent; and (b) another registered entity (the receiving entity) is included on the National Register in relation to another facility (the receiving facility) and the same security‑sensitive biological agent; and (c) the sending entity transfers the security‑sensitive biological agent from the sending facility to the receiving facility; and (d) the security‑sensitive biological agent is received at the receiving facility; and (e) the receiving entity is unable to verify, in accordance with Part 6 of the SSBA Standards, that the transport of the security‑sensitive biological to the receiving facility was successful. (4) The event mentioned in paragraph (3)(e) is a reportable event for the receiving entity.
Note: The event mentioned in paragraph (3)(c) is a reportable event for the sending entity under subparagraph 48(1)(e)(i) of the Act.
Transfers to other facilities of same entity (1) Subregulation (2) applies if: (a) a registered entity is included on the National Register in relation to a facility and a security‑sensitive biological agent; and (b) the entity a
This is an opening excerpt, not the complete document.