30DC  Secretary may require event‑based reporting of system information
Scope
(1)

This section applies if:

(a)

a computer:

(i)

is needed to operate a system of national significance; or

(ii)

is a system of national significance; and

(b)

the Secretary believes on reasonable grounds that, each time a particular kind of event occurs, a relevant entity for the system of national significance will be technically capable of preparing a report consisting of information that:

(i)

relates to the operation of the computer; and

(ii)

may assist with determining whether a power under this Act should be exercised in relation to the system of national significance; and

(iii)

is not personal information (within the meaning of the Privacy Act 1988).

Requirement
(2)

The Secretary may, by written notice given to the entity, require the entity to do the following things each time an event of that kind occurs:

(a)

prepare a report that consists of any such information;

(b)

prepare that report:

(i)

in the manner and form specified in the notice; and

(ii)

in accordance with the information technology requirements specified in the notice;

(c)

give that report to ASD as soon as practicable after the event occurs.

(3)

A notice under subsection (2) is to be known as a system information event‑based reporting notice.

(4)

In deciding whether to give a system information event‑based reporting notice to the entity, the Secretary must have regard to:

(a)

the costs that are likely to be incurred by the entity in complying with the notice; and

(b)

the reasonableness and proportionality of the requirements in the notice; and

(c)

such other matters (if any) as the Secretary considers relevant.

Matters to be set out in notice
(5)

A system information event‑based reporting notice must set out the effect of section 30DF.

Other powers not limited
(6)

This section does not, by implication, limit a power conferred by another provision of this Act.