Document ID: chunk:federal_register_of_legislation:C2017A00012:clause:1_26wr:p2
Version: federal_register_of_legislation:C2017A00012
Segment Type: clause
Provision Reference: sch 1 cl 26WR (pt 2/2)
Character Range: 28964–30254

to the Commissioner by:
 (i) an enforcement body; or
 (ii) the Australian Signals Directorate of the Defence Department;
 (b) any relevant submission that was made by the entity:
 (i) in response to an invitation under subsection (3); and
 (ii) within the period specified in the invitation;
 (c) such other matters (if any) as the Commissioner considers relevant.
 (7) Paragraph (6)(a) does not limit the advice to which the Commissioner may have regard.
 (8) If the Commissioner is aware that there are reasonable grounds to believe that the access, disclosure or loss that constituted the eligible data breach of the entity is an eligible data breach of one or more other entities, a direction under subsection (1) may also require the statement referred to in paragraph (1)(a) to set out the identity and contact details of those other entities.

Method of providing a statement to an individual
 (9) If an entity normally communicates with a particular individual using a particular method, the notification to the individual mentioned in paragraph (2)(a) or (b) may use that method. This subsection does not limit paragraph (2)(a) or (b).

Compliance with direction
 (10) An entity must comply with a direction under subsection (1) as soon as practicable after the direction is given.