Part 3Network security
Process for preventing or mitigating network security risks
57Minister may make direction
The Minister responsible for the Government Communications Security Bureau may make a direction under this section only if the Minister—
- has been referred a matter under section 54 or 55; and
- has considered any submissions from the affected network operator; and
- has considered the report of the Commissioner under section 56; and
- has consulted the Minister for Communications and Information Technology and the Minister of Trade; and
- is satisfied that exercising his or her powers under this section is necessary to prevent, sufficiently mitigate, or remove a significant network security risk.
Before making a direction under this section, the Minister must—
- have regard to—
- the nature and extent of the network security risk:
- the impact on the network operator of meeting costs associated with the direction:
- the potential consequences that the direction may have on competition and innovation in telecommunications markets:
- the anticipated benefits to New Zealand from preventing, sufficiently mitigating, or removing the network security risk:
- the principle in section 8(4):
- the potential impact of the direction on trade:
- any other matters that the Minister considers relevant; and
- the nature and extent of the network security risk:
- be satisfied that the direction is consistent with the purpose in section 7.
A direction under this section—
- may require a network operator to take steps, as specified by the Minister, to prevent, sufficiently mitigate, or remove the significant network security risk, and those steps may include—
- requiring the network operator to cease a particular activity or to do or refrain from doing a particular activity in the future; or
- directing the network operator to make changes to, or remove, any particular system, equipment, service, component, or operation on or related to the network; and
- requiring the network operator to cease a particular activity or to do or refrain from doing a particular activity in the future; or
- may provide for any other relevant matter.
The Minister must ensure that any time by which a network operator must comply with a requirement of the direction is specified in the direction and is reasonable in the circumstances.
The Minister must issue the direction in writing to the affected network operator together with reasons, except those parts of the reasons that would reveal classified security information.
The Minister must not delegate to any person, other than another Minister, the power to make a direction under this section.
Notes
- Section 57(5): amended, on , by section 56 of the Security Information in Proceedings (Repeals and Amendments) Act 2022 (2022 No 72).


