Document ID: chunk:federal_register_of_legislation:C2025C00160:section:25:p2
Version: federal_register_of_legislation:C2025C00160
Segment Type: section
Provision Reference: s 25 (pt 2/2)
Character Range: 54514–56760

must generally be given before decision to suspend
 (7) Before suspending the accreditation of an entity under subsection (2), the Digital ID Regulator must give a written notice (a show cause notice) to the entity.
 (8) The show cause notice must:
 (a) state the grounds on which the Digital ID Regulator proposes to suspend the entity's accreditation; and
 (b) invite the entity to give the Digital ID Regulator, within 28 days after the day the notice is given, a written statement showing cause why the Digital ID Regulator should not suspend the accreditation.

Exception—cyber security incident
 (9) Subsection (7) does not apply if the suspension is on a ground mentioned in paragraph (2)(b) or (c).

Notice of suspension
 (10) If the Digital ID Regulator suspends an entity's accreditation under subsection (1), (2) or (6), the Digital ID Regulator must give the entity a written notice stating the following:
 (a) that the entity's accreditation is suspended;
 (b) if the entity is accredited as more than one kind of accredited entity—the accreditation that is suspended;
 (c) the reasons for the suspension;
 (d) the day the suspension is to start;
 (e) if the accreditation is suspended for a period—the period of the suspension;
 (f) if the accreditation is suspended until a specified event occurs or action is taken—the event or action.

Effect of suspension
 (11) If an entity's accreditation is suspended under this section:
 (a) the entity is taken not to be accredited while the suspension is in force; and
 (b) if the entity holds an approval to participate in the Australian Government Digital ID System as an accredited entity—the entity is taken not to hold that approval while the entity's accreditation is suspended.

Revocation of suspension
 (12) If the Digital ID Regulator suspends an entity's accreditation under subsection (2), the Regulator may revoke the suspension by written notice to the entity.
 (13) If the Digital ID Regulator suspends an entity's accreditation under subsection (6), the Regulator must revoke the suspension by written notice to the entity if the entity requests the suspension be revoked.
 (14) A notice given under subsection (12) or (13) must specify the day the revocation takes effect.