Document ID: chunk:federal_register_of_legislation:F2022L00548:reg:12:p2
Version: federal_register_of_legislation:F2022L00548
Segment Type: reg
Provision Reference: reg 12 (pt 2/2)
Character Range: 39811–41304

(7) If, in response to a notification sent for the purposes of subsection (4), a relevant person takes the action referred to in paragraph (4)(f):
            (a) an employee or agent of the carriage service provider for the telecommunications service who has completed fraud mitigation training must investigate the basis on which the satisfaction required by subsection (2) was attained; and
            (b) if the employee or agent is satisfied that there has been fraudulent activity in relation to the high-risk customer interaction,
            then:
            (c) if one or more high-risk customer transactions have already been completed by the carriage service provider, the provider must:
              (i) take steps to immediately reverse or remediate any completed transaction;
              (ii) notify the relevant person of steps taken by the carriage service provider under subparagraph (i); and
              (iii) notify the relevant person of what they can do to protect the customer's account; or
            (d) if a high-risk customer transaction has not yet been undertaken by the carriage service provider, the provider must not undertake a high-risk customer transaction and must:
              (i) notify the relevant person that the carriage service provider has not undertaken the high-risk customer transaction; and
              (ii) notify the relevant person of what they can do to protect the customer's account.

Part 4—Additional protections requirements