(1) If an entity is party to a data sharing agreement in the capacity of data custodian, the entity must give the Commissioner, in the approved form (if any):
(a) an electronic copy of the agreement; and
(b) if the agreement is varied--an electronic copy of the variation, or the agreement as varied;
no later than 30 days after the day the agreement or variation is made.
(2) The entity must also give the Commissioner any other information or documents required by a data code to be given to the Commissioner at the time the entity gives the Commissioner a document mentioned in subsection (1).