Commonwealth Consolidated Acts

SECURITY OF CRITICAL INFRASTRUCTURE ACT 2018 - SECT 46

Required or authorised by law

  (1)   Section   45 does not apply if the making of the record, or the disclosure or use, of the information is required or authorised by or under:

  (a)   a law of the Commonwealth, other than Subdivision A or a notification provision; or

  (b)   a law of a State or Territory prescribed by the rules.

  (2)   For the purposes of subsection   (1) of this section, the following laws:

  (a)   the Corporations Act 2001 , except a provision of that Act prescribed by the rules;

  (b)   a law, or a provision of a law, of the Commonwealth prescribed by the rules;

are taken not to require or authorise the making of a record, or the disclosure, of the fact that an asset is declared under section   51 to be a critical infrastructure asset or of the fact that an asset is declared under section   52B to be a system of national significance.

Good faith

  (3)   Section   45 does not apply to an entity to the extent that the entity makes a record of, discloses or otherwise uses protected information in good faith and in purported compliance with Subdivision A or a notification provision.

Person to whom the protected information relates

  (4)   Section   45 does not apply to an entity if:

  (a)   the entity discloses protected information to the entity to whom the information relates; or

  (c)   the making of the record, or the disclosure or use, of the protected information is in accordance with the express or implied consent of the entity to whom the information relates.

Disclosure to an Ombudsman official

  (5)   Section   45 does not apply to an entity to the extent that the entity discloses protected information to an Ombudsman official for the purposes of exercising powers, or performing duties or functions, as an Ombudsman official.

Note:   A defendant bears an evidential burden in relation to the matters in this section (see subsection   13.3(3) of the Criminal Code ).