40Duty to report breach of a prescribed security measure

#### 40 Duty to report breach of a prescribed security measure 40 Duty to report breach of a prescribed security measure > > (1) A person responsible for a security enhanced source must provide a written report to the Authority regarding a breach of a prescribed security measure relating to the source within 7 days of the breach. > > > > Maximum penalty— > > > > > (a) for an individual—250 penalty units, or > > > > > (b) otherwise—500 penalty units. > > > (2) The report must include details of— > > > > > (a) the circumstances of the breach, and > > > > > (b) the steps taken to rectify the breach. > > > (3) The person is not required to provide the report if— > > > > > (a) a report has already been made by another person responsible for the source, or > > > > > (b) a report has already been given in accordance with another provision of this regulation.