Document ID: chunk:federal_register_of_legislation:F2021L00231:clause:1_21a:p4
Version: federal_register_of_legislation:F2021L00231
Segment Type: clause
Provision Reference: sch 1 cl 21A (pt 4/5)
Character Range: 54298–57429

Commissioner and of any reasonably likely or actual serious data breach (whether or not a notifiable eligible data breach) that demonstrates a significant vulnerability of other Research Organisations in handling of identifiable research information that might reasonably be expected to be mitigated by appropriate action taken by Research Organisations generally.
       (4)    Research Organisations must handle enquires and complaints received from individuals as to handling of identifiable research information about those individuals courteously, promptly and efficiently. Research Organisations should establish reliable processes and procedures for handling enquires and complaints received from individuals as to handling of identifiable research information, including by taking reasonable steps to address special needs and requirements of individuals with disabilities or particular vulnerabilities. In general responses should be provided within 30 days.
       (5)    The Code Administrator will monitor compliance by research organisations with this Code and will investigate serious and repeated breaches and systemic issues about code compliance.
       (6)    The Code Administrator will publish an Annual Report on the operation of this Code and make it available both to the Commissioner and publicly, including online. The Code Administrator will conduct an annual feedback review by making enquiries of research organisations in relation to issues or concerns that research organisations have experienced in relation to or within the scope of operation of this Code during the year in review, including complaints or other concerns of any individual raised with a research organisation in relation to or within the scope of operation of this Code during the year in review, and consider any responses of research organisations in relation to such matters, before finalising and publishing an Annual Report on the operation of this Code. The Annual Report will include a summary of complaints handled by Research Organisations and reported to the Code Administrator under subsection 28(1).
       (7)    The Code Administrator will report systemic issues or serious and repeated breaches of this Code to the Commissioner as soon as it becomes aware of them.

29 Improper conduct
       (1)    If a Research Organisation subject to this Code acts in a manner that, in the AMSRO Board's opinion, constitutes seriously improper conduct in relation to this Code, the AMSRO Board shall direct the Code Administrator to notify the Research Organisation of the conduct.
       (2)    Within 7 business days of receipt of notification by the Code Administrator of an opinion by the AMSRO Board concerning seriously improper conduct by the Research Organisation, the Research Organisation must:
         (a)    take all reasonable steps to rectify the seriously improper conduct; and
         (b)    notify the Code Administrator of the steps taken to rectify the seriously improper conduct.
       (3)    If the Research Organisation fails to adequately comply with paragraph 29(2)(a) then the AMSRO Board will issue a