16D. Extension of designation of designated provider responsible for third-party-owned critical information infrastructure

At any time before the expiry of the designation of a designated provider responsible for third-party-owned critical information infrastructure, the Commissioner may, by written notice, extend the designation of the designated provider responsible for third-party-owned critical information infrastructure, if the Commissioner is of the opinion that the criteria in section 16A(1) continue to be fulfilled.

Any extension of a designation under subsection (1) has effect for a period of 5 years starting from the expiry of the earlier designation, unless the designation is withdrawn by the Commissioner before the extension takes effect or before the expiry of the period of extension.