Cross-references

{
  "confidence": "contextual",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection (2)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "sourceHeadingText": "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 2—Voluntary information sharing with the National Cyber Security Coordinator",
    "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident"
  ],
  "sourceLineNumber": 18,
  "sourceLineText": "- (3) Information about the incident may be provided under subsection (2):",
  "sourceMatchText": "subsection (2)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator",
    "35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "targetHeadingText": "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 2—Voluntary information sharing with the National Cyber Security Coordinator",
    "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection (2)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "35",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator",
    "35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident"
  ],
  "targetSubordinatePath": [
    "(2)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "paragraph 9(2)(a)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "sourceHeadingText": "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 2—Voluntary information sharing with the National Cyber Security Coordinator",
    "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident"
  ],
  "sourceLineNumber": 26,
  "sourceLineText": "- (4) For the purposes of paragraph (1)(b), an incident (other than an incident covered by paragraph 9(2)(a) or (b)) is presumed to be a cyber security incident if:",
  "sourceMatchText": "paragraph 9(2)(a) or (b)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator",
    "35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-1-preliminary/9-meaning-of-cyber-security-incident.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-1-preliminary/9-meaning-of-cyber-security-incident.md",
  "targetHeadingText": "9 Meaning of cyber security incident",
  "targetHeadingTrail": [
    "Part 1—Preliminary",
    "9 Meaning of cyber security incident"
  ],
  "targetKind": "paragraph",
  "targetLocatorText": "paragraph 9(2)(a)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "9",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-1-preliminary",
    "9-meaning-of-cyber-security-incident"
  ],
  "targetSubordinatePath": [
    "(2)",
    "(a)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "paragraph 9(2)(a)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "sourceHeadingText": "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 2—Voluntary information sharing with the National Cyber Security Coordinator",
    "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident"
  ],
  "sourceLineNumber": 34,
  "sourceLineText": "Note: Paragraphs 9(2)(a) and (b) covers incidents involving critical infrastructure assets or the activities of corporations to which paragraph 51(xx) of the Constitution applies.",
  "sourceMatchText": "Paragraphs 9(2)(a) and (b)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator",
    "35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-1-preliminary/9-meaning-of-cyber-security-incident.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-1-preliminary/9-meaning-of-cyber-security-incident.md",
  "targetHeadingText": "9 Meaning of cyber security incident",
  "targetHeadingTrail": [
    "Part 1—Preliminary",
    "9 Meaning of cyber security incident"
  ],
  "targetKind": "paragraph",
  "targetLocatorText": "paragraph 9(2)(a)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "9",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-1-preliminary",
    "9-meaning-of-cyber-security-incident"
  ],
  "targetSubordinatePath": [
    "(2)",
    "(a)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "contextual",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection (4)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "sourceHeadingText": "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 2—Voluntary information sharing with the National Cyber Security Coordinator",
    "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident"
  ],
  "sourceLineNumber": 36,
  "sourceLineText": "- (5) However, subsection (4) does not make an entity liable to a civil penalty under this Part if the incident:",
  "sourceMatchText": "subsection (4)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator",
    "35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "targetHeadingText": "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 2—Voluntary information sharing with the National Cyber Security Coordinator",
    "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection (4)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "35",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator",
    "35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident"
  ],
  "targetSubordinatePath": [
    "(4)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection 35(2)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceHeadingText": "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator"
  ],
  "sourceLineNumber": 5,
  "sourceLineText": "- (1) The National Cyber Security Coordinator may make a record of, use or disclose information provided under subsection 35(2) by, or on behalf of, an entity (the ***impacted entity***) in relation to a cyber security incident but only for the purposes of one or more of the following:",
  "sourceMatchText": "subsection 35(2)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "targetHeadingText": "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 2—Voluntary information sharing with the National Cyber Security Coordinator",
    "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection 35(2)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "35",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator",
    "35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident"
  ],
  "targetSubordinatePath": [
    "(2)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "section 10",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceHeadingText": "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator"
  ],
  "sourceLineNumber": 9,
  "sourceLineText": "Note 1: For ***permitted cyber security purpose*** for a cyber security incident: see section 10. This includes the functions of the National Cyber Security Coordinator under this Part.",
  "sourceMatchText": "section 10",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-1-preliminary/10-meaning-of-permitted-cyber-security-purpose.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-1-preliminary/10-meaning-of-permitted-cyber-security-purpose.md",
  "targetHeadingText": "10 Meaning of permitted cyber security purpose",
  "targetHeadingTrail": [
    "Part 1—Preliminary",
    "10 Meaning of permitted cyber security purpose"
  ],
  "targetKind": "section",
  "targetLocatorText": "section 10",
  "targetResolutionKind": "artifact",
  "targetRootIdentifier": "10",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-1-preliminary",
    "10-meaning-of-permitted-cyber-security-purpose"
  ],
  "targetSubordinatePath": [],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "section 11",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceHeadingText": "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator"
  ],
  "sourceLineNumber": 11,
  "sourceLineText": "Note 2: Certain information must not be disclosed to a State body under Parts of this Act unless a Minister of the State or Territory has consented to those Parts applying to the State body: see section 11.",
  "sourceMatchText": "section 11",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-1-preliminary/11-disclosure-to-state-body.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-1-preliminary/11-disclosure-to-state-body.md",
  "targetHeadingText": "11 Disclosure to State body",
  "targetHeadingTrail": [
    "Part 1—Preliminary",
    "11 Disclosure to State body"
  ],
  "targetKind": "section",
  "targetLocatorText": "section 11",
  "targetResolutionKind": "artifact",
  "targetRootIdentifier": "11",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-1-preliminary",
    "11-disclosure-to-state-body"
  ],
  "targetSubordinatePath": [],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "section 42",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceHeadingText": "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator"
  ],
  "sourceLineNumber": 19,
  "sourceLineText": "Note: See also section 42 in relation to admissibility of the information in proceedings against the impacted entity.",
  "sourceMatchText": "section 42",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/42-admissibility-of-information-voluntarily-given-by-impacted-entity.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/42-admissibility-of-information-voluntarily-given-by-impacted-entity.md",
  "targetHeadingText": "42 Admissibility of information voluntarily given by impacted entity",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "42 Admissibility of information voluntarily given by impacted entity"
  ],
  "targetKind": "section",
  "targetLocatorText": "section 42",
  "targetResolutionKind": "artifact",
  "targetRootIdentifier": "42",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "42-admissibility-of-information-voluntarily-given-by-impacted-entity"
  ],
  "targetSubordinatePath": [],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "contextual",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection (1)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceHeadingText": "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator"
  ],
  "sourceLineNumber": 23,
  "sourceLineText": "- (3) Subsection (1) does not authorise the National Cyber Security Coordinator to record, use or disclose the information to the extent that it is prohibited or restricted by or under the *Privacy Act 1988*.",
  "sourceMatchText": "Subsection (1)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetHeadingText": "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection (1)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "38",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "targetSubordinatePath": [
    "(1)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "contextual",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection (1)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceHeadingText": "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator"
  ],
  "sourceLineNumber": 27,
  "sourceLineText": "- (4) Subsection (1) does not prohibit the recording, use or disclosure of the following information:",
  "sourceMatchText": "Subsection (1)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetHeadingText": "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection (1)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "38",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "targetSubordinatePath": [
    "(1)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "Part 3",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceHeadingText": "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator"
  ],
  "sourceLineNumber": 29,
  "sourceLineText": "  - (i) a requirement in Part 3 of this Act; or",
  "sourceMatchText": "Part 3",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "structural-container",
  "targetArtifactRelativePath": "part-3-ransomware-reporting-obligations",
  "targetCanonicalPath": "cyber-security-act-2024/part-3-ransomware-reporting-obligations",
  "targetHeadingText": "Part 3—Ransomware reporting obligations",
  "targetHeadingTrail": [
    "Part 3—Ransomware reporting obligations"
  ],
  "targetKind": "part",
  "targetLocatorText": "Part 3",
  "targetResolutionKind": "artifact",
  "targetRootIdentifier": "3",
  "targetRootKind": "part",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-3-ransomware-reporting-obligations"
  ],
  "targetSubordinatePath": [],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "section 42",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceHeadingText": "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator"
  ],
  "sourceLineNumber": 23,
  "sourceLineText": "Note: See also section 42 in relation to admissibility of the information in proceedings against the impacted entity.",
  "sourceMatchText": "section 42",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/42-admissibility-of-information-voluntarily-given-by-impacted-entity.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/42-admissibility-of-information-voluntarily-given-by-impacted-entity.md",
  "targetHeadingText": "42 Admissibility of information voluntarily given by impacted entity",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "42 Admissibility of information voluntarily given by impacted entity"
  ],
  "targetKind": "section",
  "targetLocatorText": "section 42",
  "targetResolutionKind": "artifact",
  "targetRootIdentifier": "42",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "42-admissibility-of-information-voluntarily-given-by-impacted-entity"
  ],
  "targetSubordinatePath": [],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "contextual",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection (2)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceHeadingText": "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator"
  ],
  "sourceLineNumber": 27,
  "sourceLineText": "- (4) Subsection (2) does not authorise the National Cyber Security Coordinator to record, use or disclose the information to the extent that it is prohibited or restricted by or under the *Privacy Act 1988*.",
  "sourceMatchText": "Subsection (2)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetHeadingText": "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection (2)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "39",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "targetSubordinatePath": [
    "(2)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "contextual",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection (2)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceHeadingText": "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator"
  ],
  "sourceLineNumber": 31,
  "sourceLineText": "- (5) Subsection (2) does not prohibit the recording, use or disclosure of the following information:",
  "sourceMatchText": "Subsection (2)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetHeadingText": "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection (2)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "39",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "targetSubordinatePath": [
    "(2)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "Part 3",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "sourceHeadingText": "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator"
  ],
  "sourceLineNumber": 33,
  "sourceLineText": "  - (i) a requirement in Part 3 of this Act; or",
  "sourceMatchText": "Part 3",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "structural-container",
  "targetArtifactRelativePath": "part-3-ransomware-reporting-obligations",
  "targetCanonicalPath": "cyber-security-act-2024/part-3-ransomware-reporting-obligations",
  "targetHeadingText": "Part 3—Ransomware reporting obligations",
  "targetHeadingTrail": [
    "Part 3—Ransomware reporting obligations"
  ],
  "targetKind": "part",
  "targetLocatorText": "Part 3",
  "targetResolutionKind": "artifact",
  "targetRootIdentifier": "3",
  "targetRootKind": "part",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-3-ransomware-reporting-obligations"
  ],
  "targetSubordinatePath": [],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection 35(2)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceHeadingText": "40 Limitations on secondary use and disclosure",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "sourceLineNumber": 4,
  "sourceLineText": "- (a) has been provided by, or on behalf of, an entity (the ***impacted entity***) under subsection 35(2) or as referred to in subsection 39(1); and",
  "sourceMatchText": "subsection 35(2)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md",
  "targetHeadingText": "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 2—Voluntary information sharing with the National Cyber Security Coordinator",
    "35 Impacted entity may voluntarily provide information to National Cyber Security Coordinator in relation to a significant cyber security incident"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection 35(2)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "35",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator",
    "35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident"
  ],
  "targetSubordinatePath": [
    "(2)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection 39(1)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceHeadingText": "40 Limitations on secondary use and disclosure",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "sourceLineNumber": 4,
  "sourceLineText": "- (a) has been provided by, or on behalf of, an entity (the ***impacted entity***) under subsection 35(2) or as referred to in subsection 39(1); and",
  "sourceMatchText": "subsection 39(1)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetHeadingText": "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection 39(1)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "39",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "targetSubordinatePath": [
    "(1)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection 38(1)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceHeadingText": "40 Limitations on secondary use and disclosure",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "sourceLineNumber": 5,
  "sourceLineText": "- (b) has been obtained by another entity, a Commonwealth body (other than ASD) or a State body under subsection 38(1) or 39(2) or this section; and",
  "sourceMatchText": "subsection 38(1) or 39(2)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetHeadingText": "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection 38(1)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "38",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "targetSubordinatePath": [
    "(1)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection 39(2)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceHeadingText": "40 Limitations on secondary use and disclosure",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "sourceLineNumber": 5,
  "sourceLineText": "- (b) has been obtained by another entity, a Commonwealth body (other than ASD) or a State body under subsection 38(1) or 39(2) or this section; and",
  "sourceMatchText": "subsection 38(1) or 39(2)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetHeadingText": "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection 39(2)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "39",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "targetSubordinatePath": [
    "(2)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "section 10",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceHeadingText": "40 Limitations on secondary use and disclosure",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "sourceLineNumber": 18,
  "sourceLineText": "Note: For ***permitted cyber security purpose*** for a cyber security incident: see section 10.",
  "sourceMatchText": "section 10",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-1-preliminary/10-meaning-of-permitted-cyber-security-purpose.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-1-preliminary/10-meaning-of-permitted-cyber-security-purpose.md",
  "targetHeadingText": "10 Meaning of permitted cyber security purpose",
  "targetHeadingTrail": [
    "Part 1—Preliminary",
    "10 Meaning of permitted cyber security purpose"
  ],
  "targetKind": "section",
  "targetLocatorText": "section 10",
  "targetResolutionKind": "artifact",
  "targetRootIdentifier": "10",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-1-preliminary",
    "10-meaning-of-permitted-cyber-security-purpose"
  ],
  "targetSubordinatePath": [],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "contextual",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection (2)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceHeadingText": "40 Limitations on secondary use and disclosure",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "sourceLineNumber": 28,
  "sourceLineText": "- (4) Subsection (2) does not authorise the other entity, Commonwealth body or State body to record, use or disclose the information to the extent that it is prohibited or restricted by or under the *Privacy Act 1988*.",
  "sourceMatchText": "Subsection (2)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "targetHeadingText": "40 Limitations on secondary use and disclosure",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection (2)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "40",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "targetSubordinatePath": [
    "(2)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "contextual",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection (2)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceHeadingText": "40 Limitations on secondary use and disclosure",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "sourceLineNumber": 32,
  "sourceLineText": "- (5) Subsection (2) does not prohibit:",
  "sourceMatchText": "Subsection (2)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "targetHeadingText": "40 Limitations on secondary use and disclosure",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection (2)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "40",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "targetSubordinatePath": [
    "(2)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection 38(4)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceHeadingText": "40 Limitations on secondary use and disclosure",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "sourceLineNumber": 33,
  "sourceLineText": "- (a) recording, use or disclosure of information referred to in subsection 38(4) or 39(5); or",
  "sourceMatchText": "subsection 38(4) or 39(5)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetHeadingText": "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "38 Information provided in relation to a significant cyber security incident—use and disclosure by National Cyber Security Coordinator"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection 38(4)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "38",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "targetSubordinatePath": [
    "(4)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "exact",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection 39(5)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceHeadingText": "40 Limitations on secondary use and disclosure",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "sourceLineNumber": 33,
  "sourceLineText": "- (a) recording, use or disclosure of information referred to in subsection 38(4) or 39(5); or",
  "sourceMatchText": "subsection 38(4) or 39(5)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md",
  "targetHeadingText": "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "39 Information provided in relation to other incidents—use and disclosure by National Cyber Security Coordinator"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection 39(5)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "39",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator"
  ],
  "targetSubordinatePath": [
    "(5)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}

{
  "confidence": "contextual",
  "name": "Cyber Security Act 2024",
  "referenceText": "subsection (2)",
  "schemaVersion": "1.0.0",
  "slug": "cyber-security-act-2024",
  "sourceArtifactKind": "file",
  "sourceArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "sourceHeadingText": "40 Limitations on secondary use and disclosure",
  "sourceHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "sourceLineNumber": 41,
  "sourceLineText": "- (a) the entity contravenes subsection (2); and",
  "sourceMatchText": "subsection (2)",
  "sourceStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "sourceTextUrl": "https://www.legislation.gov.au/C2024A00098/latest/text",
  "targetArtifactKind": "file",
  "targetArtifactRelativePath": "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "targetCanonicalPath": "cyber-security-act-2024/part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md",
  "targetHeadingText": "40 Limitations on secondary use and disclosure",
  "targetHeadingTrail": [
    "Part 4—Coordination of significant cyber security incidents",
    "Division 3—Protection of information",
    "40 Limitations on secondary use and disclosure"
  ],
  "targetKind": "subsection",
  "targetLocatorText": "subsection (2)",
  "targetResolutionKind": "intra-artifact",
  "targetRootIdentifier": "40",
  "targetRootKind": "section",
  "targetScope": "intra-document",
  "targetStructuralPath": [
    "part-4-coordination-of-significant-cyber-security-incidents",
    "division-3-protection-of-information",
    "40-limitations-on-secondary-use-and-disclosure"
  ],
  "targetSubordinatePath": [
    "(2)"
  ],
  "titleId": "C2024A00098",
  "versionDate": "2024-11-29"
}