(1) An organisation must comply with a compliance notice served on it under section 78(1) that is in effect.
Penalty: 600 penalty units, in the case of an individual;
3000 penalty units, in the case of a body corporate.
(2) A compliance notice served under section 78(1) does not take effect until the latest of the following—
(a) the expiry of the period specified in the notice;
(b) the expiry of any extended period fixed under section 78(3);
(c) the expiry of the period within which an application for review of the decision to serve the notice may be made to VCAT under section 83(1);
S. 82(2)(d) amended by No. 20/2017 s. 106(5).
(d) if an application is made under section 83(1) for review of the decision to serve the notice, the review has been determined in favour of the Information Commissioner.
(3) An offence against subsection (1) is an indictable offence.