David Shoebridge (NSW, Australian Greens) Share this | Hansard source

Minister, once information is provided to the ASD under the amendments to the Intelligence Services and Other Legislation Amendment (Cyber Security) Bill, there's no requirement in this legislation to seek the consent of the entity that's provided the information before it's shared by ASD to either the National Cyber Security Coordinator or others. Equally, in relation to the Cyber Security Bill, once information is provided to the Cyber Security Coordinator there's no requirement to seek the consent of the entity before the information is shared to ASD. The coordinator can share to ASD and ASD can share to the coordinator once information is provided, but at no point is there the seeking of consent of the entity who provided that. If you want to have a relationship of trust with reporting entities, and you want this early provision of information—and I think we all share that goal—why isn't there a requirement to make efforts to seek consent?