{ "algorithm": "sha256", "digest": "fce82e044a161010f850c04e94d5c47ec83aa8d3b0072720dacc2834f4d999c6", "fileCount": 91, "files": [ "_contents.md", "_frontmatter.md", "_preamble.md", "part-1-preliminary/1-short-title.md", "part-1-preliminary/10-meaning-of-permitted-cyber-security-purpose.md", "part-1-preliminary/11-disclosure-to-state-body.md", "part-1-preliminary/2-commencement.md", "part-1-preliminary/3-objects.md", "part-1-preliminary/4-simplified-outline-of-this-act.md", "part-1-preliminary/5-extraterritoriality.md", "part-1-preliminary/6-act-binds-the-crown.md", "part-1-preliminary/7-concurrent-operation-of-state-and-territory-laws.md", "part-1-preliminary/8-definitions.md", "part-1-preliminary/9-meaning-of-cyber-security-incident.md", "part-2-security-standards-for-smart-devices/division-1-preliminary/12-simplified-outline-of-this-part.md", "part-2-security-standards-for-smart-devices/division-1-preliminary/13-application-of-this-part.md", "part-2-security-standards-for-smart-devices/division-2-security-standards-for-relevant-connectable-products/14-security-standards-for-relevant-connectable-products.md", "part-2-security-standards-for-smart-devices/division-2-security-standards-for-relevant-connectable-products/15-compliance-with-security-standard-for-a-relevant-connectable-product.md", "part-2-security-standards-for-smart-devices/division-2-security-standards-for-relevant-connectable-products/16-obligation-to-provide-and-supply-products-with-a-statement-of-compliance-with-security-standard.md", "part-2-security-standards-for-smart-devices/division-3-enforcement/17-compliance-notice.md", "part-2-security-standards-for-smart-devices/division-3-enforcement/18-stop-notice.md", "part-2-security-standards-for-smart-devices/division-3-enforcement/19-recall-notice.md", "part-2-security-standards-for-smart-devices/division-3-enforcement/20-public-notification-of-failure-to-comply-with-recall-notice.md", "part-2-security-standards-for-smart-devices/division-4-miscellaneous/21-revocation-and-variation-of-notices-given-under-this-part.md", "part-2-security-standards-for-smart-devices/division-4-miscellaneous/22-internal-review-of-decision-to-give-compliance-stop-or-recall-notice.md", "part-2-security-standards-for-smart-devices/division-4-miscellaneous/23-examination-to-assess-compliance-with-security-standard-and-statement-of-compliance.md", "part-2-security-standards-for-smart-devices/division-4-miscellaneous/24-acquisition-of-property.md", "part-3-ransomware-reporting-obligations/division-1-preliminary/25-simplified-outline-of-this-part.md", "part-3-ransomware-reporting-obligations/division-2-reporting-obligations/26-application-of-this-part.md", "part-3-ransomware-reporting-obligations/division-2-reporting-obligations/27-obligation-to-report-following-a-ransomware-payment.md", "part-3-ransomware-reporting-obligations/division-2-reporting-obligations/28-liability.md", "part-3-ransomware-reporting-obligations/division-3-protection-of-information/29-ransomware-payment-reports-may-only-be-used-or-disclosed-for-permitted-purposes.md", "part-3-ransomware-reporting-obligations/division-3-protection-of-information/30-limitations-on-secondary-use-and-disclosure-of-information-in-ransomware-payment-reports.md", "part-3-ransomware-reporting-obligations/division-3-protection-of-information/31-legal-professional-privilege.md", "part-3-ransomware-reporting-obligations/division-3-protection-of-information/32-admissibility-of-information-in-ransomware-payment-report-against-reporting-business-entity.md", "part-4-coordination-of-significant-cyber-security-incidents/division-1-preliminary/33-simplified-outline-of-this-part.md", "part-4-coordination-of-significant-cyber-security-incidents/division-1-preliminary/34-meaning-of-significant-cyber-security-incident.md", "part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/35-impacted-entity-may-voluntarily-provide-information-to-national-cyber-security-coordinator-in-relation-to-a-significant-cyber-security-incident.md", "part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/36-voluntary-provision-of-information-in-relation-to-other-incidents-or-cyber-security-incidents.md", "part-4-coordination-of-significant-cyber-security-incidents/division-2-voluntary-information-sharing-with-the-national-cyber-security-coordinator/37-role-of-the-national-cyber-security-coordinator.md", "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/38-information-provided-in-relation-to-a-significant-cyber-security-incident-use-and-disclosure-by-national-cyber-security-coordinator.md", "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/39-information-provided-in-relation-to-other-incidents-use-and-disclosure-by-national-cyber-security-coordinator.md", "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/40-limitations-on-secondary-use-and-disclosure.md", "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/41-legal-professional-privilege.md", "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/42-admissibility-of-information-voluntarily-given-by-impacted-entity.md", "part-4-coordination-of-significant-cyber-security-incidents/division-3-protection-of-information/43-national-cyber-security-coordinator-not-compellable-as-witness.md", "part-4-coordination-of-significant-cyber-security-incidents/division-4-miscellaneous/44-interaction-with-other-requirements-to-provide-information-in-relation-to-a-cyber-security-incident.md", "part-5-cyber-incident-review-board/division-1-preliminary/45-simplified-outline-of-this-part.md", "part-5-cyber-incident-review-board/division-2-reviews/46-board-must-cause-reviews-to-be-conducted.md", "part-5-cyber-incident-review-board/division-2-reviews/47-board-may-discontinue-a-review.md", "part-5-cyber-incident-review-board/division-2-reviews/48-chair-may-request-information-or-documents.md", "part-5-cyber-incident-review-board/division-2-reviews/49-chair-may-require-certain-entities-to-produce-documents.md", "part-5-cyber-incident-review-board/division-2-reviews/50-civil-penalty-failing-to-comply-with-a-notice-to-produce-documents.md", "part-5-cyber-incident-review-board/division-2-reviews/51-draft-review-reports.md", "part-5-cyber-incident-review-board/division-2-reviews/52-final-review-reports.md", "part-5-cyber-incident-review-board/division-2-reviews/53-certain-information-must-be-redacted-from-final-review-reports.md", "part-5-cyber-incident-review-board/division-2-reviews/54-protected-review-reports.md", "part-5-cyber-incident-review-board/division-3-protection-of-information-relating-to-reviews/55-limitations-on-use-and-disclosure-by-the-board.md", "part-5-cyber-incident-review-board/division-3-protection-of-information-relating-to-reviews/56-limitations-on-secondary-use-and-disclosure.md", "part-5-cyber-incident-review-board/division-3-protection-of-information-relating-to-reviews/57-legal-professional-privilege.md", "part-5-cyber-incident-review-board/division-3-protection-of-information-relating-to-reviews/58-admissibility-of-information-given-by-an-entity-that-has-been-requested-or-required-by-the-board.md", "part-5-cyber-incident-review-board/division-3-protection-of-information-relating-to-reviews/59-disclosure-of-draft-review-reports-prohibited.md", "part-5-cyber-incident-review-board/division-4-establishment-functions-and-powers-of-the-board/60-cyber-incident-review-board.md", "part-5-cyber-incident-review-board/division-4-establishment-functions-and-powers-of-the-board/61-constitution-of-the-board.md", "part-5-cyber-incident-review-board/division-4-establishment-functions-and-powers-of-the-board/62-functions-of-the-board.md", "part-5-cyber-incident-review-board/division-4-establishment-functions-and-powers-of-the-board/63-independence.md", "part-5-cyber-incident-review-board/division-5-terms-and-conditions-of-appointment-of-the-chair-and-members-of-the-board/64-appointment-of-chair.md", "part-5-cyber-incident-review-board/division-5-terms-and-conditions-of-appointment-of-the-chair-and-members-of-the-board/65-remuneration-of-the-chair.md", "part-5-cyber-incident-review-board/division-5-terms-and-conditions-of-appointment-of-the-chair-and-members-of-the-board/66-appointment-of-standing-members-of-the-board.md", "part-5-cyber-incident-review-board/division-5-terms-and-conditions-of-appointment-of-the-chair-and-members-of-the-board/67-remuneration-of-standing-members-of-the-board.md", "part-5-cyber-incident-review-board/division-5-terms-and-conditions-of-appointment-of-the-chair-and-members-of-the-board/68-acting-chair.md", "part-5-cyber-incident-review-board/division-5-terms-and-conditions-of-appointment-of-the-chair-and-members-of-the-board/69-terms-and-conditions-etc.-for-standing-members.md", "part-5-cyber-incident-review-board/division-6-expert-panel-staff-assisting-and-consultants/70-expert-panel.md", "part-5-cyber-incident-review-board/division-6-expert-panel-staff-assisting-and-consultants/71-arrangements-relating-to-staff-of-the-department.md", "part-5-cyber-incident-review-board/division-6-expert-panel-staff-assisting-and-consultants/72-consultants.md", "part-5-cyber-incident-review-board/division-7-other-matters-relating-to-the-board/73-board-procedures.md", "part-5-cyber-incident-review-board/division-7-other-matters-relating-to-the-board/74-liability.md", "part-5-cyber-incident-review-board/division-7-other-matters-relating-to-the-board/75-certification-of-involvement-in-review.md", "part-5-cyber-incident-review-board/division-7-other-matters-relating-to-the-board/76-annual-report.md", "part-5-cyber-incident-review-board/division-7-other-matters-relating-to-the-board/77-rules-may-prescribe-reporting-requirements-etc..md", "part-6-regulatory-powers/division-1-preliminary/78-simplified-outline-of-this-part.md", "part-6-regulatory-powers/division-2-civil-penalty-provisions-enforceable-undertakings-and-injunctions/79-civil-penalty-provisions-enforceable-undertakings-and-injunctions.md", "part-6-regulatory-powers/division-3-monitoring-and-investigation-powers/80-monitoring-powers.md", "part-6-regulatory-powers/division-3-monitoring-and-investigation-powers/81-investigation-powers.md", "part-6-regulatory-powers/division-4-infringement-notices/82-infringement-notices.md", "part-6-regulatory-powers/division-5-other-matters/83-contravening-a-civil-penalty-provision.md", "part-7-miscellaneous/84-simplified-outline-of-this-part.md", "part-7-miscellaneous/85-how-this-act-applies-in-relation-to-non-legal-persons.md", "part-7-miscellaneous/86-delegation-by-secretary.md", "part-7-miscellaneous/87-rules.md", "part-7-miscellaneous/88-review-of-this-act.md" ], "schemaVersion": "1.0.0", "scope": "canonical-markdown-only", "slug": "cyber-security-act-2024", "versionDate": "2024-11-29" }