##### 30EB  Responsible entity’s obligation to protect critical telecommunications assets - \(1\) This section applies to a critical telecommunications asset that is prescribed by the rules for the purposes of this subsection\. Note: For specification by class, see subsection 13\(3\) of the Legislation Act 2003\. - \(2\) For the purposes of security and the protection of a critical telecommunications asset from any hazard where there is a material risk that the occurrence of the hazard could have a relevant impact on the asset, the responsible entity for the asset must, so far as it is reasonably practicable to do so, protect the asset to ensure: - \(a\) the confidentiality of communications \(as defined in the Telecommunications Act 1997\) carried on, and of information contained on, the asset; and - \(b\) the availability and integrity of the asset\. Note: Security has the same meaning as in the Australian Security Intelligence Organisation Act 1979: see the definition of security in section 5 of this Act\. Civil penalty: 1,500 penalty units\. - \(3\) Without limiting subsection \(2\), the responsible entity’s obligation under that subsection in respect of the critical telecommunications asset includes complying with the following: - \(a\) any requirements that apply to the entity and the asset under Part 2A \(critical infrastructure risk management programs\); - \(b\) the requirement to maintain competent supervision of, and effective control over, the asset; - \(c\) any other requirements prescribed by the rules for the purposes of this paragraph\. - \(4\) An entity is not liable to an action or other proceeding for damages for or in relation to an act done or omitted in good faith in performance of the obligation imposed by subsection \(2\)\. - \(5\) An officer, employee or agent of an entity is not liable to an action or other proceeding for damages for or in relation to an act done or omitted in good faith in connection with an act done or omitted by the entity as mentioned in subsection \(4\)\. ### Division 3—Responsible entity’s notification obligations impacting their security obligations --- ## Source and attribution Saved copy: C2018A00029 / C2026C00213 / f578e546a17068939a3a5a928474713f844dfae8 Scope: navPoint\_152 Compiled 2026\-06\-04\. This does not establish legal commencement\. Official source: https://www\.legislation\.gov\.au/C2018A00029/2026\-06\-04/2026\-06\-04/text/1/epub/OEBPS/document\_1/document\_1\.html Licence: https://creativecommons\.org/licenses/by/4\.0/ Based on content from the Federal Register of Legislation at 1 October 2026\. For the latest information on Australian Government legislation please go to https://www\.legislation\.gov\.au\. Converted XHTML into Tiptap JSON; recovered lists from paragraph classes; kept literal labels and text\. Print layout is changed\. The Commonwealth Coat of Arms is not covered by the CC BY licence\.