This section applies if, during a period (the relevant period) that consists of the whole or a part of a financial year, an entity was the responsible entity for one or more critical infrastructure assets that are covered by subsection 30AB(4), (5) or (6).
The entity must, within 90 days after the end of the financial year, give:
if there is a relevant Commonwealth regulator that has functions relating to the security of those assets—the relevant Commonwealth regulator; or
in any other case—the Secretary;
a report that:
sets out the reason why those assets are covered by subsection 30AB(4), (5) or (6); and
if a hazard had a significant relevant impact on one or more of those assets during the relevant period—includes a statement that:
identifies the hazard; and
evaluates the effectiveness of the action (if any) taken by the entity for the purposes of mitigating the significant relevant impact of the hazard on the assets concerned; and
is in the approved form; and
if the entity has a board, council or other governing body—is approved by the board, council or other governing body, as the case requires.
Civil penalty: 150 penalty units.
A report given by an entity under subsection (2) is not admissible in evidence against the entity in civil proceedings relating to a contravention of a civil penalty provision of this Act.