11Storage and transmission of security classified documents or national security information in electronic form

#### 11 Storage and transmission of security classified documents or national security information in electronic form (1) An authorised recipient in relation to a security classified document or national security information: (a) must not store the document or information in electronic form except on approved information and communications technology equipment for the document or information; and (b) must not transmit the document or information in electronic form unless the equipment used to transmit and to receive the document or information is approved information and communications technology equipment for the document or information. (2) When the approved information and communications technology equipment is not being used, the equipment must, subject to subsection (3): (a) be stored in a locked Class B security container located in a security classified document storage area; or (b) if it is too large to be stored in a Class B security container—be located in a security classified document storage area. (3) If any of the security classified documents or national security information stored on, or transmitted by or to, the approved information and communications technology equipment are assigned the security classification TOP SECRET or Codeword material, the equipment must be located in an area approved by the Commonwealth for the purpose of storing documents or information with that security classification. (4) A Class B security container in which the approved information and communications technology equipment is stored must have a combination that is not known to any person other than: (a) an authorised recipient in relation to all the security classified documents and national security information stored in the container; or (b) an APS employee whose duties include responsibilities relating to the container. (5) A person must not access approved information and communications technology equipment, or remove it from a security container, unless: (a) either: (i) the person is an authorised recipient in relation to all the security classified documents and national security information stored on, or transmitted by or to, the equipment, and the person needs to access any of those documents or information for the purpose of the proceeding to which the documents or information relate; or (ii) the person is a judicial officer; and (b) if the equipment is located in an area approved by the Commonwealth for the purpose of storing documents or information that are assigned the security classification TOP SECRET or Codeword material—the person is permitted by the Commonwealth to access the area. > Note: Arrangements may need to be made with the Commonwealth to permit an authorised recipient in relation to the document or information, or a judicial officer, to access the area where the equipment is located. (6) When the approved information and communications technology equipment is not being used and, if it is capable of being secured by a password, the equipment must be secured by a password that is not known by any person other than: (a) an authorised recipient in relation to all the security classified documents and national security information stored on, or transmitted by or to, the equipment who is handling the equipment for the purposes of the proceeding to which the documents or information relates; or (b) an APS employee whose duties include responsibilities relating to the equipment. (7) Subsection (8) applies in relation to the approved information and communications technology equipment if: (a) a security classified document or national security information that is assigned the security classification TOP SECRET or Codeword material is stored on, or has been transmitted by or to, the equipment; and (b) the equipment is stored in a Class B security container. (8) If the approved information and communications technology equipment is removed from the security container by an authorised recipient in relation to a security classified document or national security information stored on, or transmitted by or to, the equipment, the recipient must: (a) make a written record of the following: (i) the authorised recipient’s full name; (ii) the date and time when the equipment was removed; (iii) the place where the equipment is to be taken; and (b) put the record in the security container.