(1) A data service provider commits an offence if the provider's accountable manager contravenes subregulation (2).
(2) For subregulation (1), the accountable manager must:
(a) conduct an annual review of the provider against the requirements of its exposition and this Subpart; and
(b) address any deficiencies that are identified during the review; and
(c) give CASA a report of the annual review, including:
(i) any significant deficiencies identified since any previous annual review; and
(ii) how the deficiencies are to be addressed.