40Duty to report breach of a prescribed security measure

40 Duty to report breach of a prescribed security measure

40 Duty to report breach of a prescribed security measure

(1) A person responsible for a security enhanced source must provide a written report to the Authority regarding a breach of a prescribed security measure relating to the source within 7 days of the breach.

Maximum penalty—

(a) for an individual—250 penalty units, or

(b) otherwise—500 penalty units.

(2) The report must include details of—

(a) the circumstances of the breach, and

(b) the steps taken to rectify the breach.

(3) The person is not required to provide the report if—

(a) a report has already been made by another person responsible for the source, or

(b) a report has already been given in accordance with another provision of this regulation.