38ACyber security directions—the Act, Sch 2, cl 11

38A Cyber security directions—the Act, Sch 2, cl 11

38A Cyber security directions—the Act, Sch 2, cl 11

(1) The Minister may, by written order, give a direction (a cyber security direction) to a licensee requiring the licensee to take action the Minister considers reasonably necessary to—

(a) respond to the impact of a cyber security incident on the licensee’s information technology systems, or

(b) prevent a cyber security incident impacting the licensee’s information technology systems.

(2) The cyber security direction has effect for the period specified in the direction.

(3) A licensee given a direction must comply with the direction.

Maximum penalty—

(a) for a corporation—2,000 penalty units and, for a continuing offence, a further 200 penalty units for each day the offence continues, or

(b) for an individual—400 penalty units and, for a continuing offence, a further 40 penalty units for each day the offence continues.

s 38A: Ins 2024 (329), Sch 1[3]. Am 2025 (675), Sch 1[49].