Document ID: chunk:federal_register_of_legislation:F2024L01430:reg:2
Version: federal_register_of_legislation:F2024L01430
Segment Type: reg
Provision Reference: reg 2
Character Range: 13948–15257

2                         Participating relying party    (a) The entity must notify the System Administrator, in accordance with subrule (2), of the following incidents that have occurred, or are reasonably suspected of having occurred:
                                                            (i) any proposed change to the entity's information technology system that interacts with the Australian Government Digital ID System, if the change will, or could reasonably be expected to, have a material effect on the operation of the Australian Government Digital ID System; and
                                                            (ii) any planned or unplanned outage or downtime affecting the entity's information technology system, if the outage or downtime will, or could reasonably be expected to, have a material effect on the operation of the Australian Government Digital ID System.
                                                         (b) The notification must be made no later than 5 business days after the earliest of the following:
                                                            (i) the entity becomes aware that the incident has occurred; or
                                                            (ii) the entity reasonably suspects that the incident has occurred.