CTHIn ForceAct
Security of Critical Infrastructure Act 2018
24Ongoing obligation to give information and notify of events
Start here
Get a plain-English read of 24
Turn the raw legal text into a practical explanation grounded in Security of Critical Infrastructure Act 2018.
#### 24 Ongoing obligation to give information and notify of events
(1) This section applies to a reporting entity for a critical infrastructure asset if a notifiable event occurs in relation to the asset:
(a) after the entity gives information in relation to the asset under section 23; or
(b) after the end of the grace period for the asset.
Requirement to give information and notify of events
(2) If the reporting entity is required to give information in relation to the event in accordance with subsection (3), the reporting entity for the asset must give the Secretary that information and notice of the event:
(a) in the approved form; and
(b) by the end of 30 days after the event occurs.
> Note 1: Persons other than the entity may give the information (see section 30 (agents may give notice or information) and Division 2 of Part 7 (treatment of certain entities)).
> Note 2: For an exception to this section, see section 25 (information that is not able to be obtained).
Civil penalty: 50 penalty units.
(3) The following table sets out the information a reporting entity is required to give in relation to the event.
```html
<table cellspacing="0" cellpadding="0" style="margin-left:0.25pt; border-collapse:collapse"><thead><tr><td colspan="4" style="width:343.65pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Ongoing obligation to give information</span></p></td></tr><tr><td style="width:24.9pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Item</span></p></td><td style="width:91.85pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>If the event is ...</span></p></td><td style="width:99.05pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>this reporting entity ...</span></p></td><td style="width:95.45pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>must give this information ...</span></p></td></tr></thead><tbody><tr><td style="width:24.9pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>1</span></p></td><td style="width:91.85pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>an event covered by subparagraph</span><span> </span><span>26(a)(i)</span></p></td><td style="width:99.05pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the entity that is the responsible entity for the asset immediately after the event occurs</span></p></td><td style="width:95.45pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>any operational information in relation to the asset that is necessary to correct or complete the operational information, in relation to the asset, previously obtained by the Secretary.</span></p></td></tr><tr><td style="width:24.9pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2</span></p></td><td style="width:91.85pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>an event covered by subparagraph</span><span> </span><span>26(a)(ii)</span></p></td><td style="width:99.05pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the entity that is the direct interest holder to which the information relates</span></p></td><td style="width:95.45pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>any interest and control information in relation to the entity and the asset that is necessary to correct or complete the interest and control information, in relation to the entity and the asset, previously obtained by the Secretary.</span></p></td></tr><tr><td style="width:24.9pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>3</span></p></td><td style="width:91.85pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>an event covered by paragraph</span><span> </span><span>26(b) or (c) relating to the responsible entity for the asset</span></p></td><td style="width:99.05pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the responsible entity for the asset</span></p></td><td style="width:95.45pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the operational information in relation to the asset.</span></p></td></tr><tr><td style="width:24.9pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>4</span></p></td><td style="width:91.85pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>an event covered by paragraph</span><span> </span><span>26(b) or (c) relating to a direct interest holder in relation to the asset</span></p></td><td style="width:99.05pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the direct interest holder in relation to the asset</span></p></td><td style="width:95.45pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>the interest and control information in relation to the entity and the asset.</span></p></td></tr></tbody></table>
```
Exception to requirement to give information
(4) However, subsection (2) does not apply in relation to the event (the first event) if:
(a) before the end of 30 days after the first event occurs, another notifiable event (the second event) occurs in relation to the asset; and
(b) a result of the second event is that the information in relation to the asset that was required to be given to the Secretary under subsection (2) following the first event is no longer correct.
> Note: An entity that wishes to rely on subsection (4) in proceedings for a civil penalty order bears an evidential burden in relation to the matter in that subsection (see section 96 of the Regulatory Powers Act).