Cybersecurity Act · 2024 Revised Edition · Part · Critical Information Infrastructure
15. Change in ownership of critical information infrastructure
Official textFrom Attorney General's Chambers, unchanged
Where there is any change in the beneficial or legal ownership
(including any share in such ownership) of a critical information infrastructure, the relevant person shall inform the Commissioner of the change in ownership not later than 7 days after the date of that change in ownership.
critical information infrastructure
“critical information infrastructure” means a computer or a computer system in respect of which a designation under section 9(1) is in effect;
Any person who, without reasonable excuse, fails to comply with subsection (1) is guilty of an offence and liable on conviction to a fine not exceeding $100,000, imprisonment for a term not exceeding 2 years or both.
In subsection (1), the relevant person is —
in the case of a transfer of the whole of the legal ownership of the critical information infrastructure to another person, the person who was the owner of the critical information infrastructure before the change in ownership; or
Cybersecurity 23
in any other case, an owner of the critical information infrastructure.
Terms defined in s 2
Commissioner
Defined · s 2“Commissioner” means the Commissioner of Cybersecurity appointed under section 5(1);
critical information infrastructure
Defined · s 2“critical information infrastructure” means a computer or a computer system in respect of which a designation under section 9(1) is in effect;
cybersecurity
Defined · s 2“cybersecurity” means the state in which a computer or computer system is protected from unauthorised access or attack, and because of that state — (a) the computer or computer system continues to be available and operational; (b) the integrity of the computer or computer system is maintained; and (c) the integrity and confidentiality of information stored in, processed by or transmitted through the computer or computer system is maintained;
owner
Defined · s 2“owner”, in relation to a critical information infrastructure, means the legal owner of the critical information infrastructure and, where the critical information infrastructure is jointly owned by more than one person, includes every joint owner;
Part
Responses to Cybersecurity Threats and Incidents
Part