Document ID: chunk:federal_register_of_legislation:C2025C00055:section:26wq:p2
Version: federal_register_of_legislation:C2025C00055
Segment Type: section
Provision Reference: s 26WQ (pt 2/2)
Character Range: 331508–333295

(7) If an entity applies to the Commissioner under paragraph (5)(b):
 (a) the Commissioner may refuse the application; and
 (b) if the Commissioner does so—the Commissioner must give written notice of the refusal to the entity.
 (8) If:
 (a) an application for a paragraph (1)(d) declaration nominates a period to be specified in the declaration; and
 (b) the Commissioner makes the declaration, but specifies a different period in the declaration;
the Commissioner is taken not to have refused the application.
 (9) If an entity applies to the Commissioner under paragraph (5)(b) for a declaration that, to any extent, relates to an eligible data breach of the entity, sections 26WK and 26WL do not apply in relation to:
 (a) the eligible data breach; or
 (b) if the access, disclosure or loss that constituted the eligible data breach of the entity is an eligible data breach of one or more other entities—such an eligible data breach of those other entities;
until the Commissioner makes a decision in response to the application for the declaration.
 (10) An entity is not entitled to make an application under paragraph (5)(b) in relation to an eligible data breach of the entity if:
 (a) the access, disclosure or loss that constituted the eligible data breach of the entity is an eligible data breach of one or more other entities; and
 (b) one of those other entities has already made an application under paragraph (5)(b) in relation to the eligible data breach of the other entity.

Extension of specified period
 (11) If notice of a paragraph (1)(d) declaration has been given to an entity, the Commissioner may, by written notice given to the entity, extend the period specified in the declaration.

Subdivision C—Commissioner may direct entity to notify eligible data breach