Telecommunications (Interception Capability and Security) Act 2013

Network security - Disclosure

48: Network operator must notify Director

You could also call this:

"Tell the Director about security changes to keep everyone safe"

Illustration for Telecommunications (Interception Capability and Security) Act 2013

You are a network operator. You must tell the Director about any plans or changes to equipment, systems, or services that are important for security. You need to do this before you start looking for suppliers or making big decisions. You must give the Director enough time to think about whether they need to take action under section 51. You must also tell the Director about any changes to the ownership or control of equipment, systems, or services that are important for security. This includes changes to who is in charge of them. You must give the Director notice of these changes so they can consider taking action. You have to follow these rules to keep the Director informed about what you are doing. This helps the Director make sure everything is secure. You must comply with these rules when you are making decisions about equipment, systems, or services that are important for security.

This text is automatically generated. It might be out of date or be missing some parts. Find out more about how we do this.

This page was last updated on

View the original legislation for this page at https://legislation.govt.nz/act/public/1986/0120/latest/link.aspx?id=DLM5178093.


Previous

47: Areas of specified security interest, or

"Important parts of a network that need extra security to keep customer information safe"


Next

49: Exemption from section 46(1) or 48, or

"The Director can let a network operator off some rules if it's safe."

Part 3Network security
Disclosure

48Network operator must notify Director

  1. A network operator must notify the Director of any proposed decision, course of action, or change made by or on behalf of the network operator regarding—

  2. the procurement or acquisition of any equipment, system, or service that falls within an area of specified security interest; or
    1. any change—
      1. to the architecture of any equipment, system, or service that falls within an area of specified security interest; or
        1. that may affect the ownership, control, oversight, or supervision of any equipment, system, or service that falls within an area of specified security interest.
        2. The network operator must—

        3. comply with subsection (1)(a) before any steps are taken, as part of the procurement or acquisition decision-making process, to approach the market (whether by request for quote, tender, or otherwise) or comply with subsection (1)(b) during the development of a business or change proposal; and
          1. ensure any notice given to the Director in compliance with subsection (1) is given within sufficient time for the Director to consider whether to take action under section 51.