Cyber Security Act 2024

The Secretary may, by notice in writing given to an entity, vary a compliance notice, stop notice or recall notice given under this Part to the entity if the Secretary is reasonably satisfied that the variation is required:

in order to rectify an error, defect or ambiguity in the notice; or

to adequately rectify the non‑compliance, or possible non‑compliance, to which the notice relates.

Before giving the notice to the entity under subsection (1), the Secretary must:

notify the entity that the Secretary intends to give the notice to the entity; and

give the entity a specified period (which must not be shorter than 10 days) to make representations about the giving of the notice.

A varied compliance notice, stop notice or recall notice has the same effect as the original notice for the purposes of this Part.

The Secretary may, by notice in writing given to an entity, revoke a compliance notice, stop notice or recall notice given under this Part to the entity if the Secretary is no longer satisfied that the grounds for issuing the notice were met.

If a compliance notice, stop notice or recall notice, relating to non‑compliance or possible non‑compliance by an entity with an obligation, is revoked under subsection (4), no further notices may be issued under this Part in relation to that non‑compliance.