Document ID: chunk:federal_register_of_legislation:F2025L00276:clause:1_3
Version: federal_register_of_legislation:F2025L00276
Segment Type: clause
Provision Reference: sch 1 cl 3
Character Range: 11713–13154

3  Requirements relating to reports of security issues
 (1) The manufacturer of a relevant connectable product must publish the information in subclause (2) on how a person is to report security issues in relation to the product in respect of any of the following:
 (a) hardware of the product;
 (b) software which is pre‑installed on the product at the point at which the product is supplied to a consumer;
 (c) software which must be installed on the product for all the manufacturer's intended purposes of the product that use:
 (i) hardware; or
 (ii) software that is pre‑installed at the point at which the product is supplied to a consumer; or
 (iii) software that is installable;
 (d) software used for, or in connection with, any of the manufacturer's intended purposes of the product.
 (2) The information that must be published is:
 (a) at least one point of contact to allow a person to report security issues to the manufacturer; and
 (b) when a person who makes such a report will receive:
 (i) an acknowledgement of the receipt of the report; and
 (ii) status updates until the resolution of the reported security issues.
 (3) The information published must be accessible, clear and transparent, and must be made available to a person:
 (a) without prior request for such information being made; and
 (b) in English; and
 (c) free of charge; and
 (d) without requesting the provision of personal information about the person.