Copyright Act 2021 · 2020 Revised Edition · Part 7 · Additional Rights Relating to Copyright Works and Protected Performances
433. Exception — testing of security flaws, etc., of computer
Feedback & supportA person may circumvent an access control measure by doing an act in relation to a protected copy if —
copy
“copy” has the meanings given by the provisions in Subdivision (2) of Division 3 of Part 2;
the act is done for the sole purpose of testing, investigating or correcting a security flaw or vulnerability of a computer;
the act is done in good faith;
the act is done by or with the authority of the owner of the computer;
the act is not a rights infringement in relation to the protected copy; and
the act does not violate any written law other than this Act.
A person may deal in a circumventing device if —
the device is used only in circumstances to which subsection (1) applies; or
at the time of dealing, the person does not know and could not reasonably have known that the device will be used in any other circumstances.
A person may deal in a circumventing service if —
the service is performed only in circumstances to which subsection (1) applies; or
at the time of dealing, the person does not know and could not reasonably have known that the service will be performed in any other circumstances.
In this section, “computer” includes a computer system and a computer network.