Document ID: chunk:federal_register_of_legislation:C2024C00830:section:13:p2
Version: federal_register_of_legislation:C2024C00830
Segment Type: section
Provision Reference: s 13 (pt 2/2)
Character Range: 41812–43090

in the NDLFRS; and
 (e) to report annually to the Department on the party's compliance with the agreement.

Requirements on the Department
 (4) The agreement must provide for the Department:
 (a) to maintain the security of identification information included in a database in the NDLFRS, including by encrypting the information; and
 (b) to inform the other parties to the agreement of any data breaches involving that information and the NDLFRS; and
 (c) to inform the Information Commissioner of any data breaches that:
 (i) involve that information and the NDLFRS; and
 (ii) are reasonably likely to result in serious harm to an individual to whom that information relates.
Note: For paragraph (4)(a), see also paragraph 25(a).

Requirement relating to compliance
 (5) The agreement must provide for suspension or termination of the ability of a party to the agreement to request identity verification services involving the NDLFRS if the party does not comply with the agreement.

Timing and nature of agreement
 (6) To avoid doubt:
 (a) an agreement may be the NDLFRS hosting agreement whether it was made before, on or after the commencement of this section; and
 (b) paragraph (1)(c) and subsections (3), (4) and (5) do not limit the matters the agreement may deal with.