(1) A data service provider must have a contingency plan that sets out the procedures to be followed if an authorised data service activity for the provider is interrupted.
(2) The contingency plan must include:
(a) the actions to be taken by personnel responsible for conducting the activity; and
(b) possible alternative arrangements for conducting the activity; and
(c) arrangements for resuming normal conduct of the activity.