Section 15
Change in ownership of critical information infrastructure
(1)
Where there is any change in the beneficial or legal ownership
(including any share in such ownership) of a critical information infrastructure, the relevant person shall inform the Commissioner of the change in ownership not later than 7 days after the date of that change in ownership.
(2)
Any person who, without reasonable excuse, fails to comply with subsection (1) is guilty of an offence and liable on conviction to a fine not exceeding $100,000, imprisonment for a term not exceeding 2 years or both.
(3)
In subsection (1), the relevant person is —
(a)
in the case of a transfer of the whole of the legal ownership of the critical information infrastructure to another person, the person who was the owner of the critical information infrastructure before the change in ownership; or
Cybersecurity 23
(b)
in any other case, an owner of the critical information infrastructure.
Duty to report cybersecurity incident in respect of critical information infrastructure etc.