Cybersecurity Act 2018 · 2020 Revised Edition · Part 3 · Provider-Owned Critical Information Infrastructure
13. Change in ownership of provider-owned critical information infrastructure
Feedback & supportLast amended by an amending law of 2024.
Where there is any change in the beneficial or legal ownership (including any share in such ownership) of a provider-owned critical information infrastructure, the relevant person must inform the Commissioner of the change in ownership not later than 7 days after the date of that change in ownership.
Commissioner
“Commissioner” means the Commissioner of Cybersecurity appointed under section 4(1)(a);
Any person who, without reasonable excuse, fails to comply with subsection (1) shall be guilty of an offence and shall be liable on conviction to a fine not exceeding $100,000 or to imprisonment for a term not exceeding 2 years or to both.
In subsection (1), the relevant person is —
in the case of a transfer of the whole of the legal ownership of the provider-owned critical information infrastructure to another person — the person who was the owner of the provider-owned critical information infrastructure before the change in ownership; or
in any other case, an owner of the provider-owned critical information infrastructure.