(1) The Director - General must establish and maintain a register of requests for internal authorisations.
(2) The register may be kept by electronic means.
(3) The register must include, for each request for an internal authorisation:
(a) the name of the person who made the request; and
(b) the matter that is important in relation to security in respect of which the authorisation was requested; and
(c) the day on which the authorisation was given or refused; and
(d) the name of the authorising officer who gave or refused to give the authorisation; and
(e) if the authorisation was given:
(i) the day on which the authorisation ceased to be in force; and
(ii) whether action under the authorisation was discontinued in accordance with section 26P, and, if so, the day on which the action was discontinued; and
(f) the location at which any record relating to the request (including the request) is kept by the Organisation.
Note: For the purposes of paragraph (f), the location may be a physical location or an electronic location.
(4) The register is not a legislative instrument.