Part 3Network security
Process for preventing or mitigating network security risks
55Failure to comply
This section applies if,—
- despite being advised under section 51, a network operator has entered into a binding legal arrangement, implemented a decision, or commenced a course of action or change that gives rise to a significant network security risk; or
- a network operator fails to comply with a requirement of this Part or a requirement to supply information or a class of information under section 78 and has entered into a binding legal arrangement, implemented a decision, or commenced a course of action or change that gives rise to a significant network security risk.
If this section applies, the Director—
- may, after complying with section 56, refer the matter to the Minister responsible for the Government Communications Security Bureau to make a direction under section 57; and
- must, if a referral is made, inform the network operator that it may make submissions on the matter directly to the Minister, and specify a time, which must be reasonable in the circumstances, by which those submissions must be made.


