Skip to content
Legislation
Skip to legislation

Cyber Security Act 2024 · Version 2024-11-29

50 Civil penalty—failing to comply with a notice to produce documents

Register source version C2024A00098 · Source observation:

Reading presentation · Verification limits and dated status · No live currency check

Part 5—Cyber Incident Review Board

Read this container only

Division 2—Reviews

Read this container only

50 Civil penalty—failing to comply with a notice to produce documents

  • (1) An entity is liable to a civil penalty if:
  • (a) the entity is given a notice under subsection 49(2); and
  • (b) the entity fails to comply with the notice.

Civil penalty: 60 penalty units.

  • (2) Subsection (1) does not apply in relation to the production of a document or a copy of a document if the production would, or could reasonably be expected to, prejudice one or more of the following:
  • (a) the security, defence or international relations of the Commonwealth;
  • (b) the capabilities of an intelligence agency;
  • (c) the prevention, detection or investigation of, or the conduct of proceedings relating to, an offence or a contravention of a civil penalty provision;
  • (d) the administration of justice.
  • (3) Subsection 93(2) of the Regulatory Powers Act does not apply in relation to a contravention of subsection (1) of this section.
  • (4) Despite section 96 of the Regulatory Powers Act, in proceedings for a civil penalty order against an entity for a contravention of subsection (1), the entity does not bear an evidential burden in relation to the matters in subsection (2).

Note: This Act does not make the Crown (other than an authority of the Crown) liable to a civil penalty.