{"type":"doc","content":[{"type":"section","attrs":{"id":"navPoint_128"},"content":[{"type":"heading","attrs":{"id":"v0-p-2607","level":5},"content":[{"type":"text","text":"30CZ","marks":[{"type":"bold"}]},{"type":"text","text":"  ","marks":[{"type":"bold"}]},{"type":"text","text":"Vulnerability assessment report","marks":[{"type":"bold"}]}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(1)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2608"},"content":[{"type":"text","text":"If an entity undertakes, or causes to be undertaken, a vulnerability assessment under section"},{"type":"text","text":" "},{"type":"text","text":"30CU, the entity must:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2609"},"content":[{"type":"text","text":"do both of the following:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(i)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2610"},"content":[{"type":"text","text":"prepare, or cause to be prepared, a vulnerability assessment report relating to the assessment;"}]}]},{"type":"legalListItem","attrs":{"marker":"(ii)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2611"},"content":[{"type":"text","text":"give a copy of the report to the Secretary; and"}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2612"},"content":[{"type":"text","text":"do so:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(i)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2613"},"content":[{"type":"text","text":"within 30 days after the completion of the assessment; or"}]}]},{"type":"legalListItem","attrs":{"marker":"(ii)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2614"},"content":[{"type":"text","text":"if the Secretary allows a longer period—within that longer period."}]}]}]}]}]},{"type":"paragraph","attrs":{"id":"v0-p-2615"},"content":[{"type":"text","text":"Civil penalty:"},{"type":"text","text":" "},{"type":"text","text":"200 penalty units."}]}]},{"type":"legalListItem","attrs":{"marker":"(2)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2616"},"content":[{"type":"text","text":"If a designated officer undertakes a vulnerability assessment in accordance with a request given to the designated officer under section"},{"type":"text","text":" "},{"type":"text","text":"30CW, the designated officer must:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2617"},"content":[{"type":"text","text":"do both of the following:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(i)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2618"},"content":[{"type":"text","text":"prepare a vulnerability assessment report relating to the assessment;"}]}]},{"type":"legalListItem","attrs":{"marker":"(ii)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2619"},"content":[{"type":"text","text":"give a copy of the report to the Secretary; and"}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2620"},"content":[{"type":"text","text":"do so:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(i)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2621"},"content":[{"type":"text","text":"within 30 days after the completion of the assessment; or"}]}]},{"type":"legalListItem","attrs":{"marker":"(ii)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2622"},"content":[{"type":"text","text":"if the Secretary allows a longer period—within that longer period."}]}]}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(3)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2623"},"content":[{"type":"text","text":"If an entity prepares, or causes to be prepared, a report under subsection"},{"type":"text","text":" "},{"type":"text","text":"(1), the report is not admissible in evidence against the entity in civil proceedings relating to a contravention of a civil penalty provision of this Act (other than subsection"},{"type":"text","text":" "},{"type":"text","text":"(1))."}]}]}]}]}]}