Document ID: chunk:federal_register_of_legislation:F2025L00276:clause:1_4
Version: federal_register_of_legislation:F2025L00276
Segment Type: clause
Provision Reference: sch 1 cl 4
Character Range: 13154–15941

4  Requirements relating to defined support periods and security updates
 (1) The manufacturer of a relevant connectable product must publish the defined support period for security updates for the product in respect of the following:
 (a) hardware of the product that is capable of receiving security updates;
 (b) software that is capable of receiving security updates where that software is pre‑installed on the product at the point at which the product is supplied to a consumer;
 (c) software that is capable of receiving security updates which must be installed on the product for all the manufacturer's intended purposes of the product that use:
 (i) hardware;
 (ii) software that is pre‑installed at the point at which the product is supplied to a consumer; or
 (iii) software that is installable;
 (d) software developed by, or on behalf of, any manufacturer that is capable of receiving security updates and used for, or in connection with, any of the manufacturer's intended purposes of the product.
 (2) A security update is a software update that protects or enhances the security of the product, including a software update that addresses a security issue which has been discovered by or reported to the manufacturer.
 (3) The defined support period is the period, expressed as a period of time with an end date, for which the security updates will be provided by, or on behalf of, the manufacturer of the product.
 (4) The manufacturer must not shorten the defined support period after it is published under subclause (1).
 (5) If the manufacturer extends the defined support period, the new defined support period must be published by, or on behalf of, the manufacturer as soon as is practicable.
 (6) Information required to be published under this clause:
 (a) must be accessible, clear and transparent; and
 (b) must be made available to a person:
 (i) without prior request for such information being made; and
 (ii) in English; and
 (iii) free of charge; and
 (iv) without requesting the provision of personal information about the person; and
 (v) in such a way that is understandable by a reader without prior technical knowledge.
 (7) If the manufacturer offers to supply the product on its website, or another website under its control, the manufacturer must ensure:
 (a) that the information required to be published under this clause is prominently published with the other information on the website that is intended to inform consumers' decisions to acquire the product; and
 (b) for each instance on the website that the main characteristics of the product are published, that the information required to be published under this clause is published alongside or otherwise given equal prominence to the publication of the main characteristics of the product.