Source document: https://docs-lawep.s3.us-east-2.amazonaws.com/1698751818646.pdf (New Zealand)
Government Communications Security Bureau Amendment Bill Government Bill As reported from the committee of the whole House This bill was formerly part of the Government Communications Se- curity Bureau and Related Legislation Amendment Bill as reported from the Intelligence and Security Committee.
The committee of the whole House has further amended the bill and divided it into the fol- lowing bills: • this bill comprising clauses 1 and 2, Part 1, and Schedules 1 and 2 Inspector-General of Intelligence and Security Amendment Bill comprising Part 2 Intelligence and Security Committee Amendment Bill com- prising Part 3.
• • 109—3A Government Communications Security Bureau Amendment Bill Key to symbols used in reprinted bill As reported from the committee of the whole House text inserted text deleted Rt Hon John Key Government Communications Security Bureau Amendment Bill Government Bill Contents 5A 6 Title Commencement Principal Act Section 3 amended (Purpose) Section 4 amended (Interpretation) New section 5A inserted (Transitional provisions relating to amendments to Act) 5A Transitional provisions relating to amendments to Act Sections 7 and 8 replaced 7 8 8A 8B 8C Objective of Bureau Functions of Bureau Information assurance and cybersecurity Intelligence gathering and analysis Co-operation with other entities to facilitate their functions 8CA Principles underpinning performance of Bureau’s 8D functions Director has full powers for purpose of performing Bureau’s functions 7 Section 9 replaced (Director of Bureau) Appointment of Director 9 Appointment process 9A 109—3A Page 4 4 4 4 4 5 5 5 5 6 6 7 7 8 9 9 9 9 1 Government Communications Security Bureau Amendment Bill 9B Remuneration and conditions of appointment of Director Removal from office 9C 9D Review of performance of Director Section 11 amended (Prohibition on unauthorised disclosure of information) Section 12 amended (Annual report) Part 3 heading replaced Section 13 replaced (Purpose of Part) 13 Section 14 replaced (Interceptions not to target domestic communications) 14 Interceptions not to target New Zealand citizens or permanent residents for intelligence-gathering purposes Purpose of Part Section 15 amended (Interceptions for which warrant or authorisation required) New sections 15A to 15F and cross-heading inserted Authorisations to intercept communications or access information infrastructures Authorisation to intercept communications or access information infrastructures Involvement of Commissioner of Security Warrants Privileged communications Information that interception warrant or access authorisation must contain 15A 15B 15C 15D 15E Warrant or
 authorisation may authorise persons to assist person giving effect to warrant or authorisation Expiry of warrant or authorisation not to prevent further application 15F Section 16 amended (Certain interceptions permitted without interception warrant or computer access authorisation) Section 17 and cross-heading repealed Section 18 repealed (Persons acting under warrant) Section 19 and cross-heading replaced Register of interception warrants and access authorisations 19 Register of interception warrants and access authorisations Government Communications Security Bureau Amendment Bill Urgent issue of warrants and authorisations Immunity from civil and criminal liability Urgent issue of warrants and authorisations 19A Section 20 amended (Director’s functions in relation to warrants and authorisations not to be delegated) Section 21 replaced (Action taken in accordance with warrant or authorisation justified) 21 Section 22 repealed (Term of warrant or authorisation) Section 23 amended (Destruction of irrelevant records obtained by interception) Section 24 amended (Duty to minimise impact of interception on third parties) Section 25 replaced (Prevention or detection of serious crime) 25 When incidentally obtained intelligence may be retained and communicated to other persons New sections 25A and 25B and cross-heading inserted Protection and disclosure of personal information Formulation of policy on personal information Principles to protect personal information 25A 25B New Part 3A inserted 25A Part 3A Transitional provisions relating to amendments to Act 25C Transitional provisions relating to amendments to Act 25B 26 Schedule inserted Consequential amendments · · · Schedule 1 New Schedule inserted · · Schedule 2 Consequential amendments 18 19 19 19 20 20 20 20 20 21 21 22 22 23 23 23 24 25 3 cl 1 Government Communications Security Bureau Amendment
 Bill The Parliament of New Zealand enacts as follows: Title This Act is the Government Communications Security Bureau Amendment Act 2013.
Commencement This Act comes into force on the day that is 1 month after the date on which it receives the Royal assent.

5 Principal Act This Part amends the Government Communications Security Bureau Act 2003 (the principal Act).
10 Section 3 amended (Purpose) Replace section 3(c) to (e) with: “(c) specify the circumstances in which the Bureau requires an interception warrant or access authorisation to inter- cept communications: specify the conditions that are necessary for the issue of an interception warrant or access authorisation and the matters that may be authorised by a warrant or an authorisation: specify the circumstances in which the Bureau may use 20 interception devices to intercept communications with- out a warrant or an authorisation.” 15 “(d) “(e) Section 4 amended (Interpretation) This section amends section 4.
Repeal the definitions of computer access authorisation or 25 authorisation, computer system, foreign communications, foreign intelligence, and network.
Insert in their appropriate alphabetical order: “access authorisation means an authorisation issued under section 15A(1)(b) 30 (1) (2) (3) 4 Government Communications Security Bureau Amendment Bill cl 6 “incidentally obtained intelligence means intelligence— “(a) that is obtained in the course of gathering intelligence about the capabilities, intentions, or activities of foreign organisations or foreign persons; but that is not intelligence of the kind referred to in para- 5 graph (a) “(b) “information infrastructure includes electromagnetic emis- sions, communications systems and networks, information technology systems and networks, and any communications carried on, contained in, or relating to those emissions, sys- 10 tems, or networks”.
In the definition of access, replace “computer system” with “information infrastructure”.

In the definition of communication, after “sounds,”, insert “information,”.

In the definition of foreign organisation, paragraph (d), re- place “exclusively” with “principally”.

In the definition of interception warrant, replace “section 17” with “section 15A(1)(a)”.
15 (4) (5) (6) (7) 5A New section 5A inserted (Transitional provisions relating 20 to amendments to Act) After section 5, insert: “5A Transitional provisions relating to amendments to Act The Schedule contains transitional provisions relating to amendments made to this Act after 1 January 2013.” 25 6 “7 Sections 7 and 8 replaced Replace sections 7 and 8 with: Objective of Bureau The objective of the Bureau, in performing its functions, is to contribute to— “(a) “(b) the national security of New Zealand; and the international relations and well-being of New Zealand; and the economic well-being of New Zealand.
“(c) 30 5 cl 6 Government Communications Security Bureau Amendment Bill Functions of Bureau “8 “(1) Sections 8A to 8C set out the functions of the Bureau.

“(2) The order in which the functions are set out is not to be taken as specifying any order of importance or priority.

“(3) The performance of the Bureau’s functions and the relative 5 importance and priority of the functions, if any, are to be de- termined, from time to time, by the Director, subject to the control of the Minister.
“(4) Without limiting subsection (3), the performance of the Bu- reau’s functions under section 8A (information assurance and 10 cybersecurity) and section 8C (co-operation with other en- tities to facilitate their functions) is at the discretion of the Dir- ector.

In addition to the functions set out in sections 8A to 8C, the Bureau has the functions (if any) conferred on it by or under 15 any other Act.
“(5) “8A Information assurance and cybersecurity This function of the Bureau is— “(a) to co-operate with, and provide advice and assistance to, any public authority whether in New Zealand or over- 20 seas, or to any other entity authorised by the Minister, on any matters relating to the protection, security, and integrity of— “(i) communications, including those that are pro- cessed, stored, or communicated in or through in- 25 formation infrastructures; and information infrastructures of importance to the Government of New Zealand; and “(b) without limiting paragraph (a), to do everything that “(ii) is necessary or desirable to protect the security and in- 30 tegrity of the communications and information infras- tructures referred to in paragraph (a), including iden- tifying and responding to threats or potential threats to those communications and information infrastructures; and to report on anything done under paragraphs (a) and (b) and provide any intelligence gathered as a result and any analysis of the intelligence to— 35 “(c) 6 Government Communications Security Bureau Amendment Bill cl 6 “(i) “(ii) the Minister; and any person or office holder (whether in New Zealand or overseas) authorised by the Minister to receive the report or intelligence.
“8B Intelligence gathering and analysis “(1) This function of the Bureau is— 5 “(a) “(b) “(c) to gather and analyse intelligence (including from infor- mation infrastructures) in accordance with the Govern- ment’s requirements about the capabilities, intentions, and activities of foreign persons and foreign organisa- 10 tions; and to gather and analyse intelligence about information in- frastructures; and to provide any intelligence gathered and any analysis of the intelligence to— “(i) “(ii) the Minister; and any person or office holder (whether in New Zealand or overseas) authorised by the Minister to receive the intelligence.
15 “(2) For the purpose of performing its function under subsection 20 (1)(a) and (b), the Bureau may co-operate with, and provide advice and assistance to, any public authority (whether in New Zealand or overseas) and any other entity authorised by the Minister for the purposes of this subsection.
“8C Co-operation with other entities to facilitate their 25 functions “(1) This function of the Bureau is to co-operate with, and provide advice and assistance to, the following for the purpose of fa- cilitating the performance of their functions: the New Zealand Police; and “(a) the New Zealand Defence Force; and “(b) the New Zealand Security Intelligence Service; and.
“(c) any department (within the meaning of the Public Fi- “(d) nance Act 1989) or part of any department or to a depart- ment but only in relation to a specified function or ser- 35 vice performed or provided by the department specified for the purposes of this section by the Governor-Gen- 30 7 cl 6 Government Communications Security Bureau Amendment Bill eral by Order in Council made on the recommendation of the Minister.
“(2) To avoid doubt, the Bureau may perform its function under subsection (1) only— “(a) “(b) “(c) only to the extent that the advice and assistance are pro- 5 vided for the purpose of activities that the entities may lawfully undertake; and subject to and in accordance with any limitations, re- strictions, and protections under which those entities perform their functions and exercise their powers; and even though the advice and assistance might involve the exercise of powers by, or the sharing of the capabilities of, the Bureau that the Bureau is not, or could not be, authorised to exercise or share in the performance of its other functions.
10 15 “(3) Any advice or assistance provided by the Bureau under sub- section (1) to another entity is subject to— “(a) the jurisdiction of any other body or authority to the same extent as the other entity’s actions are subject to the other body’s or authority’s jurisdiction (for example, 20 the Independent Police Conduct Authority in relation to advice and assistance provided to the New Zealand Police); and the oversight of the Inspector-General of Intelligence and Security under his or her functions in section 11 of 25 the Inspector-General of Intelligence and Security Act 1996.
“(b) “8CA Principles underpinning performance of Bureau’s functions In performing its functions under this Act, the Bureau acts— 30 in accordance with New Zealand law and all human “(a) rights standards recognised by New Zealand law, ex- cept to the extent that they are, in relation to national security, modified by an enactment: in the discharge of its operational functions, independ- 35 ently and impartially: “(b) “(c) with integrity and professionalism: “(1) 8 Government Communications Security Bureau Amendment Bill cl 7 “(d) in a manner that facilitates effective democratic over- sight.
“(2) Subsection (1) does not impose particular duties on, or give particular powers to, the Bureau, the Director, or any employee of the Bureau.
5 “(3) The Director must take all reasonable steps to ensure that— “(a) “(b) “(c) the activities of the Bureau are limited to those that are relevant to the discharge of its functions: the Bureau is kept free from any influence or consider- ation that is not relevant to its functions: the Bureau does not take any action for the purpose of furthering or harming the interests of any political party in New Zealand.
10 “(4) The Director must consult regularly with the Leader of the Op- position for the purpose of keeping him or her informed about 15 matters relating to the Bureau’s functions under sections 8A to 8C.

“8D Director has full powers for purpose of performing Bureau’s functions “(1) The Director has all the powers that are necessary or desirable 20 for the purpose of performing the functions of the Bureau.
“(2) Subsection (1) applies subject to this Act, any other enact- ment, and the general law.” 7 Section 9 replaced (Director of Bureau) Replace section 9 with: Appointment of Director “9 “(1) The Director of the Bureau is appointed by the Governor-Gen- eral, on the recommendation of the Prime Minister, for a term not exceeding 5 years, and may from time to time be reap- pointed.
25 30 “(2) To avoid doubt, the mere fact that a person holds the position of Director does not entitle the person to be reappointed or to expect to be reappointed.

“9A Appointment process The State Services Commissioner— 35 9 cl 7 Government Communications Security Bureau Amendment Bill “(a) is responsible for managing the process for the appoint- ment of the Director; and “(b) must provide advice on the nominations for Director to the Prime Minister.
“9B Remuneration and conditions of appointment of Director “(1) The Director is paid the remuneration and allowances deter- 5 mined by the Remuneration Authority.

“(2) The other terms and conditions of the Director’s appointment are determined from time to time by the State Services Com- missioner.

10 “9C Removal from office “(1) The Governor-General may at any time for just cause, on the recommendation of the Prime Minister, remove the Director from office.
“(2) The removal must be made by written notice to the Director.

“(3) The notice must— 15 “(a) “(b) state the date on which the removal takes effect, which must not be earlier than the date on which the notice is received; and state the reasons for the removal.

“(4) The State Services Commissioner is responsible for advising the Prime Minister on any proposal to remove the Director from office.
In this section, just cause includes misconduct, inability to perform the functions of office, and neglect of duty.

“(5) 20 25 “9D Review of performance of Director “(1) The Minister may direct the State Services Commissioner or another person to review, either generally or in respect of any particular matter, the performance of the Director.
“(2) The person conducting a review under subsection (1) must 30 report to the Minister on the manner and extent to which the Director is fulfilling all of the requirements imposed on the Director, whether under this Act or otherwise.
“(3) No review under this section may consider any security oper- ations undertaken, or proposed to be undertaken.” 35 10 Government Communications Security Bureau Amendment Bill cl 11 8 Section 11 amended (Prohibition on unauthorised disclosure of information) In section 11(2),— (a) (b) replace “2 years” with “3 years”; and replace “$2,000” with “$5,000”.

5 9 (1) Section 12 amended (Annual report) In section 12(2), replace “without delay” with “as soon as prac- ticable”.
(1A) After section 12(3)(b), insert: “(ba) if any interception warrants have been issued during the 10 year to which the report relates, the number of warrants issued; and”.

In section 12(3)(c), delete “computer”.


(2) (3) After section 12(3)(c), insert: “(ca) if any access authorisations have been issued during the 15 year to which the report relates, the number of author- isations issued; and “(cb) a statement as to whether the Bureau has, under its func- tion specified in section 8C(1), provided during the year to which the report relates any advice or assistance 20 and, if so, the number of instances on which advice or assistance has been provided; and”.
10 Part 3 heading replaced Replace the Part 3 heading with: “Part 3 “Intercepting communications and accessing information infrastructures”.
11 Section 13 replaced (Purpose of Part) Replace section 13 with: “13 Purpose of Part The purpose of this Part is— “(a) to authorise the Bureau to intercept communications and access information infrastructures for the purpose 25 30 11 cl 12 Government Communications Security Bureau Amendment Bill “(b) of performing its functions under sections 8A and 8B; and to place restrictions and limitations on— “(i) the interception of communications and the ac- cessing of information infrastructures; and the retention and use of information derived from the interception of communications and the ac- cessing of information infrastructures.” “(ii) 5 12 “14 “(1) 10 Section 14 replaced (Interceptions not to target domestic communications) Replace section 14 with: Interceptions not to target New Zealand citizens or permanent residents for intelligence-gathering purposes In performing the Bureau’s function in section 8B, the Dir- ector, any employee of the Bureau, and any person acting on 15 behalf of the Bureau must not authorise or do anything for the purpose of intercepting the private communications of a per- son who is a New Zealand citizen or a permanent resident of New Zealand, unless (and to the extent that) the person comes within the definition of foreign person or foreign organisation 20 in section 4.
“(2) Any incidentally obtained intelligence obtained by the Bureau in the performance of its function in section 8B— “(a) is not obtained in breach of section 8B; but “(b) must not be retained or disclosed except in accordance 25 with sections 23 and 25.” Section 15 amended (Interceptions for which warrant or authorisation required) In section 15(1)(a), replace “a network” with “an information infrastructure”.
In section 15(2),— (a) replace “a computer access authorisation” with “an ac- cess authorisation”; and replace “a computer system” with “an information in- frastructure”.
(b) 30 35 13 (1) (2) 12 Government Communications Security Bureau Amendment Bill cl 14 14 New sections 15A to 15F and cross-heading inserted After section 15, insert: “Authorisations to intercept communications or access information infrastructures “15A Authorisation to intercept communications or access 5 information infrastructures “(1) For the purpose of performing the Bureau’s functions under section 8A or 8B, the Director may apply in writing to the Minister for the issue of— “(a) an interception warrant authorising the use of intercep- 10 tion devices to intercept communications not otherwise lawfully obtainable by the Bureau of the following kinds: “(i) communications made or received by 1 or more persons or classes of persons specified in the au- 15 thorisation or made or received in 1 or more places or classes of places specified in the author- isation: communications that are sent from, or are being sent to, an overseas country: “(ii) 20 “(b) an access authorisation authorising the accessing of 1 or more specified information infrastructures or classes of information infrastructures that the Bureau cannot otherwise lawfully access.
“(2) The Minister may grant the proposed interception warrant or 25 access authorisation if satisfied that— “(a) “(b) “(c) “(d) the proposed interception or access is for the purpose of performing a function of the Bureau under section 8A or 8B; and the outcome sought to be achieved under the proposed 30 interception or access justifies the particular intercep- tion or access; and the outcome is not likely to be achieved by other means; and there are satisfactory arrangements in place to ensure 35 that nothing will be done in reliance on the warrant or authorisation beyond what is necessary for the proper performance of a function of the Bureau; and 13 cl 14 Government Communications Security Bureau Amendment Bill “(e) there are satisfactory arrangements in place to ensure that the nature and consequences of acts done in reliance on the warrant or authorisation will be reasonable, hav- ing regard to the purposes for which they are carried out.
“(3) Before issuing a warrant or an authorisation, the Minister must 5 consult the Minister of Foreign Affairs about the proposed warrant or authorisation.

“(4) The Minister may issue a warrant or an authorisation subject to any conditions that the Minister considers desirable in the public interest.

10 “(5) This section applies despite anything in any other Act.
“15B Involvement of Commissioner of Security Warrants “(1) An application for, and issue of, an interception warrant or ac- cess authorisation under section 15A must be made jointly to, and issued jointly by, the Minister and the Commissioner 15 of Security Warrants if anything that may be done under the warrant or authorisation is for the purpose of intercepting the private communications of a New Zealand citizen or perman- ent resident of New Zealand under— “(a) “(b) section 8B, to the extent that intercepting the person’s private communications under that section is not pre- cluded by section 14. section 8A; or 20 “(2) For the purposes of subsection (1), section 15A applies— “(a) as if references to the Minister were references to the 25 Minister and the Commissioner of Security Warrants; and “(b) with any other necessary modifications.
In this section, Commissioner of Security Warrants means the Commissioner of Security Warrants appointed under sec- 30 tion 5A of the New Zealand Security Intelligence Service Act 1969.
“(3) “15C Privileged communications “(1) No interception warrant or access authorisation is to be issued under section 15A, and no powers are to be exercised under 35 an interception warrant or access authorisation issued under 14 Government Communications Security Bureau Amendment Bill cl 14 section 15A, for the purpose of intercepting the privileged communications of New Zealand citizens or permanent resi- dents of New Zealand.
In subsection (1), privileged communications means com- munications that are privileged in proceedings in a court of 5 law under section 54, 56, 58, or 59 of the Evidence Act 2006.
“(2) “15D Information that interception warrant or access “(c) “(d) authorisation must contain Every interception warrant and access authorisation must spe- cify the following information: the date of issue: “(a) the person, persons, or classes of persons authorised to “(b) make the interception or obtain the access: the period for which the warrant or authorisation is is- sued, being a period not exceeding 12 months: the function or functions of the Bureau to which the warrant or authorisation relates: any person, persons, or classes of persons whose com- munications may be intercepted under the warrant or authorisation: any place, places, or classes of places that the warrant or authorisation applies to: the information infrastructure, information infrastruc- tures, or classes of information infrastructures that the warrant or authorisation applies to: any conditions under which interception may be made or access may be obtained.
“(h) “(g) “(e) “(f) 10 15 20 25 “15D Information that interception warrant or access authorisation must contain “(1) Every interception warrant and access authorisation must spe- 30 cify the following information: the date of issue: “(a) the person, persons, or classes of persons authorised to “(b) make the interception or obtain the access: the period for which the warrant or authorisation is is- 35 sued, being a period not exceeding 12 months: “(c) 15 cl 14 Government Communications Security Bureau Amendment Bill “(d) “(e) “(f) the function or functions of the Bureau to which the warrant or authorisation relates: the purpose of the warrant or authorisation: any conditions under which interception may be made or access may be obtained.
5 “(2) Every interception warrant must also specify the following in- formation: “(a) “(b) if the purpose of the warrant is to authorise the inter- ception of the communications of 1 or more persons, the person, persons, or classes of persons whose com- 10 munications may be intercepted: if the purpose of the warrant is to intercept communica- tions at 1 or more places, the place, places, or classes of places that the warrant applies to.
“(3) Every access authorisation must also specify the information 15 infrastructure, information infrastructures, or classes of infor- mation infrastructures that the authorisation applies to.

“15E Warrant or authorisation may authorise persons to assist person giving effect to warrant or authorisation “(2) “(1) A warrant or an authorisation may request 1 or more persons 20 or classes of persons to give any assistance that is reasonably necessary to give effect to the warrant or authorisation.
If a request is made, under subsection (1), to 1 or more per- sons or classes of persons who are employees (the employees), the warrant or authorisation must also request the persons who 25 are the employers of the employees, or any other persons in any way in control of the employees, to make the services of the employees available to the Bureau.
“(3) On an application made in writing by the Director, the Minister may amend a warrant or authorisation (as appropriate)— “(a) by substituting a person, persons, or classes of persons for the person, persons, or classes of persons specified in the warrant or authorisation under section 15D(e) 15D(2)(a): 30 “(b) by substituting another person, other persons, or other 35 classes of persons for a person, persons, or classes of persons requested under subsection (1): 16 Government Communications Security Bureau Amendment Bill cl 15 “(c) by adding any person, persons, or classes of persons to the persons requested under subsection (1).
“15F Expiry of warrant or authorisation not to prevent further application The expiry of an interception warrant or of an authorisation 5 does not prevent a further application for an interception war- rant or an authorisation in respect of the same subject matter.” 15 Section 16 amended (Certain interceptions permitted without interception warrant or computer access authorisation) In the heading to section 16, delete “computer”.
In section 16, before subsection (1), insert: (1) (2) “(1A) This section— 10 “(a) applies to the interception of communications for the purpose of the Bureau’s functions in sections 8A and 15 8B; but “(b) does not authorise anything to be done for the purpose of intercepting the private communications of a New Zealand citizen or permanent resident of New Zealand.” In section 16(1), delete “foreign”.
Replace section 16(2) with: (3) (4) “(2) The Director, or an employee of the Bureau, or a person acting on behalf of the Bureau may, without an interception warrant, or, as the case requires, without an access authorisation, in- tercept communications by using an interception device or by 25 accessing an information infrastructure, but only if— “(a) 20 “(b) “(c) the interception does not involve any activity specified in section 15(1); and any access to an information infrastructure is limited to access to 1 or more communication links between 30 computers or to remote terminals; and the interception is carried out by the Director or with the authority of the Director for the purpose of performing the Bureau’s function in section 8A or 8B.” 17 cl 16 16 17 18 Government Communications Security Bureau Amendment Bill Section 17 and cross-heading repealed Repeal section 17 and the cross-heading above section 17.
Section 18 repealed (Persons acting under warrant) Repeal section 18.

Section 19 and cross-heading replaced Replace section 19 and the cross-heading above section 19 with: 5 “Register of interception warrants and access authorisations “19 Register of interception warrants and access 10 authorisations “(1) The Director must keep a register of interception warrants and access authorisations issued under this Part.
“(2) The following information must be entered in the register in relation to every interception warrant and access authorisation 15 issued under this Part: “(a) the information specified in section 15D; and “(b) whether the warrant or authorisation contains a request “(c) to give assistance under section 15E(1); and any person, persons, or classes of persons substituted or 20 added under section 15E(3).
“(3) The Director must make the register available to the Minister or the Inspector-General of Intelligence and Security as and when requested by the Minister or the Inspector-General.

“(4) As soon as practicable after information specified in section 25 15D(2)(a) is entered in the register, the Director must notify the Inspector-General of Intelligence and Security if the infor- mation relates to a New Zealand citizen or a permanent resi- dent of New Zealand.
“Urgent issue of warrants and authorisations 30 “19A Urgent issue of warrants and authorisations “(1) This section applies if— “(a) the Minister is unavailable to issue an interception war- rant or access authorisation; and 18 Government Communications Security Bureau Amendment Bill cl 20 “(b) circumstances make it necessary to issue a warrant or an authorisation before the Minister is available to do so.
“(2) Any of the following may issue a warrant or an authorisation: “(a) “(b) “(c) the Attorney-General: the Minister of Defence: the Minister of Foreign Affairs.

5 “(3) A person issuing a warrant or an authorisation under subsec- tion (2) may do so only to the same extent and subject to the same terms and conditions as apply to the issue of a warrant 10 or an authorisation by the Minister.
“(4) A person issuing a warrant or an authorisation under subsec- tion (2) must, as soon as practicable after the Minister be- comes available, advise the Minister about the issue of the warrant.” 15 Section 20 amended (Director’s functions in relation to warrants and authorisations not to be delegated) In section 20, replace “section 17 or section 19” with “section 15A”.
Section 21 replaced (Action taken in accordance with warrant or authorisation justified) Replace section 21 with: Immunity from civil and criminal liability “21 “(1) Every person is immune from civil or criminal liability— 20 “(a) “(b) for any act done in good faith in order to obtain a war- 25 rant or an authorisation under this Act: for anything done in good faith under a warrant or an authorisation under this Act or under section 16, if done in a reasonable manner.
“(2) Every person is immune from civil and criminal liability for 30 any act done in good faith and in a reasonable manner in order to assist a person to do anything authorised by a warrant or an authorisation under this Act or under section 16.

In any civil proceeding in which a person asserts that he or she has an immunity under this section, the onus is on the person 35 to prove the facts necessary to establish the basis of the claim.
“(3) 19 19 20 cl 21 Government Communications Security Bureau Amendment Bill “(4) Section 86 of the State Sector Act 1988 applies to the Director and any employee of the Bureau subject to this section.” 21 22 (1) (2) (3) (4) 23 24 Section 22 repealed (Term of warrant or authorisation) Repeal section 22.

5 Section 23 amended (Destruction of irrelevant records obtained by interception) In section 23(1), delete “computer”.
In section 23(1), after “except to the extent”, insert “permitted by section 25 or to the extent”.

In section 23(1)(a), replace “section 7(1)(a)” with “section 10 7”.

In section 23(1)(b), replace “section 8” with “section 8A or 8B”.

Section 24 amended (Duty to minimise impact of interception on third parties) In section 24, replace “a computer” with “an”.
15 Section 25 replaced (Prevention or detection of serious crime) Replace section 25 with: “25 When incidentally obtained intelligence may be retained 20 and communicated to other persons “(1) Despite section 23, the Director may— “(a) “(b) retain incidentally obtained intelligence that comes into the possession of the Bureau for 1 or more of the pur- poses specified in subsection (2); and communicate that intelligence to the persons specified in subsection (3).
25 “(2) The purposes are— “(a) preventing or detecting serious crime in New Zealand or any other country: 30 “(ab) preventing or avoiding the loss of human life on the high seas: “(b) preventing or responding to threats to human life in New Zealand or any other country: 20 Government Communications Security Bureau Amendment Bill cl 25 “(c) identifying, preventing, or responding to threats or po- tential threats to the security or defence of New Zealand or any other country.
“(3) The persons are— “(a) “(b) “(c) “(d) any employee of the New Zealand Police: any member of the New Zealand Defence Force: the Director of Security under the New Zealand Secur- ity Intelligence Service Act 1969: any public authority (whether in New Zealand or over- seas) that the Director thinks fit to receive the informa- 10 tion.” 5 25 New sections 25A and 25B and cross-heading inserted After section 25, insert: “Protection and disclosure of personal information 15 “25A Formulation of policy on personal information “(1) As soon as is reasonably practicable after the commencement of this section, the Director must, in consultation with the In- spector-General of Intelligence and Security and the Privacy Commissioner, formulate a policy that applies to the Bureau 20 (in a manner compatible with the requirements of national se- curity) the principles set out in section 25B.
“(2) The policy must require— “(a) “(b) all employees and persons acting on behalf of the Bu- reau to comply with the policy; and the level of compliance with the policy to be regularly audited.

25 “(2A) The Director must advise the Privacy Commissioner of the results of audits conducted under the policy.

“(2B) The Privacy Commissioner may provide a report to the In- 30 spector-General of Intelligence and Security if the results of the audits disclose issues that need to be addressed.
“(3) The Director must regularly review the policy at intervals of not more than 3 years and, if he or she considers it appro- priate to do so, revise the policy in consultation with the In- 35 spector-General of Intelligence and Security and the Privacy Commissioner.
21 cl 25A Government Communications Security Bureau Amendment Bill “25B Principles to protect personal information The principles referred to in section 25A(1) are as follows: the Bureau must not collect personal information un- “(a) less— “(i) the information is collected for a lawful purpose 5 connected with a function of the Bureau; and the collection of the information is reasonably necessary for that purpose, having regard to the nature of intelligence gathering: “(ii) “(b) the Bureau must ensure— “(i) 10 that any personal information it holds is protected by such security safeguards as it is reasonable in the circumstances to take against— “(A) “(B) access, use, modification, or disclosure, 15 except with the authority of the Bureau; and loss; and “(ii) “(C) other misuse; and that if it is necessary for any personal information that it holds to be given to a person in connection 20 with the provision of a service to the Bureau, everything reasonably within the power of the Bureau is done to prevent unauthorised use or unauthorised disclosure of the information: “(c) “(d) the Bureau must not use personal information without 25 taking such steps (if any) as are, in the light of the inter- ests and constraints of national security and the nature of intelligence gathering, reasonable to ensure that, hav- ing regard to the purpose for which the information is proposed to be used, the information is accurate, up to 30 date, complete, relevant, and not misleading: the Bureau must not keep personal information longer than is required for the purposes for which the informa- tion may be lawfully used.” 25A New Part 3A inserted Before Part 4, insert: 35 22 Government Communications Security Bureau Amendment Bill cl 26 “Part 3A “Transitional provisions relating to amendments to Act “25C Transitional provisions relating to amendments to Act The transitional provisions set out in the Schedule, which 5 relate to amendments made to this Act after 1 January 2013, have effect for the purposes of this Act.” 25B Schedule inserted Insert the Schedule set out in Schedule 1.
26 Consequential amendments The Acts listed in the Schedule 2 are consequentially amended in the manner indicated in that schedule.
10 · · · · · 23 Schedule 1 Government Communications Security Bureau Amendment Bill Schedule 1 New Schedule inserted s 25B Schedule Transitional provisions relating to amendments made to Act after 1 January 2013 ss 5A, 25C 5 10 Clauses (2) and (3) apply to computer access authorisations and interception warrants issued under this Act and in force immediately before the commencement of Part 1 of the Gov- ernment Communications Security Bureau and Related Legislation Amendment Bill.
The computer access authorisations and interception warrants continue in force as if the amendments made by Part 1 of the Government Communications Security Bureau and Related Legislation Amendment Bill had not come into force.
The computer access authorisations and interception warrants are to be treated as having expired at the close of the third month after the date on which Part 1 of the Government Communications Security Bureau and Related Legisla- tion Amendment Bill received the Royal assent, unless they 20 have expired earlier.
15 (1) (2) (3) 24 Government Communications Security Bureau Amendment Bill Schedule 2 Consequential amendments s 26 Radiocommunications Act 1989 (1989 No 148) In section 133A(2)(c)(ii), replace “foreign intelligence” with “intelli- gence about the capabilities, intentions, and activities of foreign per- 5 sons and foreign organisations”.

Repeal section 133A(3)(a).

Search and Surveillance Act 2012 (2012 No 24) In section 47(1)(c)(ii), replace “17” with “15A(1)(a)”.
Telecommunications (Interception Capability) Act 2004 (2004 No 19) In section 3(1), definition of interception warrant, paragraph (c), replace “17” with “15A(1)(a)”.

In section 3(1), definition of other lawful interception authority, replace paragraph (a)(ii) with: “(ii) to access an information infrastructure (within the meaning of the Government Communica- tions Security Bureau Act 2003) that is granted under section 15A(1)(b) of that Act; and”.
10 15 Legislative history Divided from Government Communications Security Bureau and Related Legislation Amendment Bill (Bill 109–2) by the committee of the whole House as Bill 109–3A 20 August 2013 12 Published under the authority of the House of Representatives—2013 Wellington, New Zealand: 25