Security of Critical Infrastructure (Consequential and Transitional Provisions) Act 2018
No. 30, 2018
An Act to deal with consequential and transitional matters in connection with the Security of Critical Infrastructure Act 2018, to amend the Foreign Acquisitions and Takeovers Act 1975, and for related purposes
Contents
1 Short title
2 Commencement
3 Schedules
Schedule 1—Amendments consequential on the Security of Critical Infrastructure Act 2018
Australian Security Intelligence Organisation Act 1979
Foreign Acquisitions and Takeovers Act 1975
Schedule 2—Other amendments
Foreign Acquisitions and Takeovers Act 1975
Security of Critical Infrastructure (Consequential and Transitional Provisions) Act 2018
No. 30, 2018
An Act to deal with consequential and transitional matters in connection with the Security of Critical Infrastructure Act 2018, to amend the Foreign Acquisitions and Takeovers Act 1975, and for related purposes
[Assented to 11 April 2018]
The Parliament of Australia enacts:
1 Short title
This Act is the Security of Critical Infrastructure (Consequential and Transitional Provisions) Act 2018.
2 Commencement
(1) Each provision of this Act specified in column 1 of the table commences, or is taken to have commenced, in accordance with column 2 of the table. Any other statement in column 2 has effect according to its terms.
Commencement information |
Column 1 | Column 2 | Column 3 |
Provisions | Commencement | Date/Details |
1. Sections 1 to 3 and anything in this Act not elsewhere covered by this table | The day this Act receives the Royal Assent. | 11 April 2018 |
2. Schedule 1 | Immediately after the commencement of section 32 of the Security of Critical Infrastructure Act 2018. | 11 July 2018 |
3. Schedule 2 | The day after this Act receives the Royal Assent. | 12 April 2018 |
Note: This table relates only to the provisions of this Act as originally enacted. It will not be amended to deal with any later amendments of this Act.
(2) Any information in column 3 of the table is not part of this Act. Information may be inserted in this column, or information in it may be edited, in any published version of this Act.
3 Schedules
Legislation that is specified in a Schedule to this Act is amended or repealed as set out in the applicable items in the Schedule concerned, and any other item in a Schedule to this Act has effect according to its terms.
Schedule 1—Amendments consequential on the Security of Critical Infrastructure Act 2018
Australian Security Intelligence Organisation Act 1979
1 Subsection 35(1) (after paragraph (d) of the definition of prescribed administrative action)
Insert:
; or (e) the exercise of a power under subsection 32(2) of the Security of Critical Infrastructure Act 2018.
1A Section 38A (at the end of the heading)
Add “or directions under the Security of Critical Infrastructure Act”.
1B After subsection 38A(1)
Insert:
(1A) This section also applies to an adverse security assessment in respect of a person (the assessed person) if the assessment is given for the purposes of section 32 of the Security of Critical Infrastructure Act 2018 (direction if risk of act or omission would be prejudicial to security).
Foreign Acquisitions and Takeovers Act 1975
2 After paragraph 122(1)(o)
Insert:
(oa) the Security of Critical Infrastructure Act 2018;
3 At the end of subsections 122(2) and (3)
Add:
; (g) national security.
Schedule 2—Other amendments
Foreign Acquisitions and Takeovers Act 1975
1 After paragraph 122(1)(g)
Insert:
(ga) the Defence Act 1903;
2 At the end of subsections 122(2) and (3)
Add:
; (f) defence.
[Minister’s second reading speech made in—
Senate on 7 December 2017
House of Representatives on 28 March 2018]
Overview
The Security of Critical Infrastructure (Consequential and Transitional Provisions) Act 2018 was enacted by the Parliament of Australia to address consequential and transitional matters arising from the Security of Critical Infrastructure Act 2018. This legislation also seeks to amend the Foreign Acquisitions and Takeovers Act 1975 and includes related provisions. The Act was assented to on 11 April 2018, with various sections and schedules commencing on specified dates to ensure a smooth transition and implementation of the new critical infrastructure security framework. The policy objective of this Act is to provide a cohesive legislative environment that supports the overarching aim of safeguarding Australia's critical infrastructure against potential threats.
Scope and Application
The Security of Critical Infrastructure (Consequential and Transitional Provisions) Act 2018 applies to the amendments necessitated by the introduction of the Security of Critical Infrastructure Act 2018, specifically to the Australian Security Intelligence Organisation Act 1979 and the Foreign Acquisitions and Takeovers Act 1975. It provides the necessary legal framework for the transitional provisions and consequential amendments required due to the establishment of new regulatory measures under the Security of Critical Infrastructure Act 2018. This Act applies to entities and individuals involved in critical infrastructure sectors, as well as to any transactions and conduct that fall under the purview of the new security legislation. The Act has a national jurisdictional reach, applying across Australia as a Commonwealth Act. Certain provisions commence on the date the Act receives Royal Assent, while others commence at a later date specified in the Act, such as immediately after the commencement of relevant sections of the Security of Critical Infrastructure Act 2018. The Act extends its application through subordinate instruments, which detail the specific amendments and transitional measures required under the new legislative framework.
Key Provisions
The Security of Critical Infrastructure (Consequential and Transitional Provisions) Act 2018 primarily deals with the transitional and consequential amendments required by the Security of Critical Infrastructure Act 2018. The Act is structured into several key sections. The short title (section 1) establishes the name of the Act, and the commencement provisions (section 2) specify when different parts of the Act take effect. For example, sections 1 to 3 and unspecified provisions commence on the day the Act receives Royal Assent, which was 11 April 2018. Other provisions, detailed in the schedules, have different commencement dates, such as immediately after the commencement of section 32 of the Security of Critical Infrastructure Act 2018 (Schedule 1) and the day after the Act receives Royal Assent (Schedule 2).
The schedules outline specific amendments to existing legislation to ensure consistency and integration with the new provisions introduced by the Security of Critical Infrastructure Act 2018. Schedule 1 makes consequential amendments to the Australian Security Intelligence Organisation Act 1979 and the Foreign Acquisitions and Takeovers Act 1975. For instance, it modifies the definition of prescribed administrative action under the former Act to include certain powers under the Security of Critical Infrastructure Act 2018. Similarly, it adjusts the application of adverse security assessments and adds new elements to the considerations for national security in the latter Act. Schedule 2 introduces additional amendments to the Foreign Acquisitions and Takeovers Act 1975, further integrating critical infrastructure security into existing frameworks.
The Act imposes several obligations and requirements on the entities it governs. For instance, it mandates the Australian Security Intelligence Organisation to consider the exercise of powers under the Security of Critical Infrastructure Act 2018 when performing its functions. Additionally, it requires that adverse security assessments under the Security of Critical Infrastructure Act 2018 be incorporated into the existing legislative framework. Furthermore, the Foreign Acquisitions and Takeovers Act 1975 is amended to include critical infrastructure security and national security as factors in decision-making processes. These obligations ensure that the new security provisions are seamlessly integrated into the existing legislative landscape.
In terms of consequences for non-compliance, the Act itself does not explicitly state offences, penalties, or civil/criminal consequences for breaches. However, the Security of Critical Infrastructure Act 2018, which this Act supports, does contain provisions for offences and penalties. For example, failing to comply with a direction under the Security of Critical Infrastructure Act 2018 could result in significant penalties. While the exact penalties are detailed within the Security of Critical Infrastructure Act 2018, they typically include substantial fines and potential imprisonment for serious breaches. Therefore, entities and individuals affected by this Act must ensure compliance to avoid these severe repercussions.