Security of Critical Infrastructure Act 2018

For the purposes of this Act:

access to:

computer data; or

a computer program; or

modification of:

computer data; or

a computer program; or

the impairment of electronic communication to or from a computer; or

the impairment of the availability, reliability, security or operation of:

a computer; or

computer data; or

a computer program;

The following is an example of a situation where a person is not entitled to cause access, modification or impairment of a kind mentioned in subsection (1): a person who is an employee or agent of the responsible entity for an asset would exceed the person’s authority as such an employee or agent in causing such access, modification or impairment in relation to the asset.

For the purposes of subsection (1), it is immaterial whether the person can be identified.

For the purposes of subsection (1), if:

a person causes any access, modification or impairment of a kind mentioned in that subsection; and

the person does so:

under a warrant issued under a law of the Commonwealth, a State or a Territory; or

under an emergency authorisation given to the person under Part 3 of the Surveillance Devices Act 2004 or under a law of a State or Territory that makes provision to similar effect; or

under a tracking device authorisation given to the person under section 39 of the Surveillance Devices Act 2004; or

under an authorisation given under section 31A of the Telecommunications (Interception and Access) Act 1979; or

in accordance with a technical assistance request; or

in compliance with a technical assistance notice; or

in compliance with a technical capability notice;