Document ID: chunk:federal_register_of_legislation:C2024C00826:section:133cr:p2
Version: federal_register_of_legislation:C2024C00826
Segment Type: section
Provision Reference: s 133CR (pt 2/2)
Character Range: 330990–331742

body later complies with information security requirements before end of 90‑day period
 (5) For the purposes of subsection (1) or (3), this subsection applies if:
 (a) the licensee reasonably believes that the CRB is not complying with section 20Q of the Privacy Act 1988 on the 1 July referred to in that subsection; and
 (b) the licensee complies with paragraphs 133CS(2)(a) and (b) in relation to that belief; and
 (c) the licensee ceases to hold that belief on a day (the cessation day) before the end of the 90‑day period starting on that 1 July.

Requirements apply whether the information is kept in or outside this jurisdiction
 (6) Subsection (1) or (3) applies whether the mandatory credit information is kept in or outside this jurisdiction.