##### 30CZ  Vulnerability assessment report - \(1\) If an entity undertakes, or causes to be undertaken, a vulnerability assessment under section 30CU, the entity must: - \(a\) do both of the following: - \(i\) prepare, or cause to be prepared, a vulnerability assessment report relating to the assessment; - \(ii\) give a copy of the report to the Secretary; and - \(b\) do so: - \(i\) within 30 days after the completion of the assessment; or - \(ii\) if the Secretary allows a longer period—within that longer period\. Civil penalty: 200 penalty units\. - \(2\) If a designated officer undertakes a vulnerability assessment in accordance with a request given to the designated officer under section 30CW, the designated officer must: - \(a\) do both of the following: - \(i\) prepare a vulnerability assessment report relating to the assessment; - \(ii\) give a copy of the report to the Secretary; and - \(b\) do so: - \(i\) within 30 days after the completion of the assessment; or - \(ii\) if the Secretary allows a longer period—within that longer period\. - \(3\) If an entity prepares, or causes to be prepared, a report under subsection \(1\), the report is not admissible in evidence against the entity in civil proceedings relating to a contravention of a civil penalty provision of this Act \(other than subsection \(1\)\)\. --- ## Source and attribution Saved copy: C2018A00029 / C2026C00213 / f578e546a17068939a3a5a928474713f844dfae8 Scope: navPoint\_128 Compiled 2026\-06\-04\. This does not establish legal commencement\. Official source: https://www\.legislation\.gov\.au/C2018A00029/2026\-06\-04/2026\-06\-04/text/1/epub/OEBPS/document\_1/document\_1\.html Licence: https://creativecommons\.org/licenses/by/4\.0/ Based on content from the Federal Register of Legislation at 1 October 2026\. For the latest information on Australian Government legislation please go to https://www\.legislation\.gov\.au\. Converted XHTML into Tiptap JSON; recovered lists from paragraph classes; kept literal labels and text\. Print layout is changed\. The Commonwealth Coat of Arms is not covered by the CC BY licence\.