# 54 Protected review reports

- (1) If information must be redacted from a final review report under section 53, the Board must prepare another report (a ***protected review report***) that includes:
- (a) the redacted information; and
- (b) the reasons for redacting the information from the final review report.
- (2) If a protected review report is prepared under this section, the Board must give the Minister, and the Prime Minister, a copy of:
- (a) the final review report prepared under section 52; and
- (b) a copy of the protected review report.
- (3) The Minister may give a copy of the protected review report, or an extract of the protected review report, to any other Commonwealth body, a State body or an entity but only for the purposes of one or more of the following:
- (a) the performance of the functions of a Commonwealth body relating to responding to, mitigating or resolving a cyber security incident;
- (b) the performance of the functions of a State body relating to responding to, mitigating or resolving a cyber security incident;
- (c) informing and advising the Minister, and other Ministers of the Commonwealth, about a cyber security incident;
- (d) the performance of the functions of an intelligence agency.