Data Availability and Transparency Act 2022

The Commissioner may give a data scheme entity a written direction requiring the entity to take, or not to take, specified actions if the Commissioner is satisfied that:

either of the following situations exists:

the entity, or another entity, has acted or is likely to act in a way that is inconsistent with this Act or a data sharing agreement;

an emergency or high risk situation has arisen or is likely to arise; and

for a requirement to take specified actions—it is necessary, to address the situation or prevent it arising again, for the entity to take the actions immediately or as soon as practicable; and

for a requirement not to take specified actions—the entity is taking the actions or may take them imminently and it is necessary, to address the situation or prevent it arising again, for the entity not to take the actions.

The Commissioner may give a data scheme entity a written direction requiring the entity to take, or not to take, specified actions if the Commissioner is satisfied that:

the entity, or another entity, has acted or is likely to act in a way that is inconsistent with this Act or a data sharing agreement; and

for a requirement to take specified actions—it is necessary, to address the situation mentioned in paragraph (a) or prevent it arising again, for the entity to take the actions; and

for a requirement not to take specified actions—the entity is taking the actions or may take them and it is necessary, to address the situation mentioned in paragraph (a) or prevent it arising again, for the entity not to take the actions.

The Commissioner may give an accredited entity a written direction requiring the entity to take, or not to take, specified actions if the Commissioner is satisfied that:

the accreditation authority for the entity intends to cancel the entity’s accreditation (whether at the entity’s request or otherwise); and

for a requirement to take specified actions—it is necessary, to ensure that the entity does not hold scheme data after the cancellation, for the entity to take the actions; and

for a requirement not to take specified actions—it is necessary, to ensure that the entity does not hold scheme data after the cancellation, for the entity not to take the actions.

The specified actions may include providing another entity with access to scheme data.

An entity must comply with a direction given to the entity.

A direction made under subsection (1), (2) or (3) is not a legislative instrument.