Schedule 1 Amendments (c) declare that sections 26WK and 26WL do not apply in relation to: (i) the eligible data breach of the entity; and (ii) if the access, disclosure or loss that constituted the eligible data breach of the entity is an eligible data breach of one or more other entities—such an eligible data breach of those other entities; or (d) declare that subsection 26WL(3) has effect in relation to: (i) the eligible data breach of the entity; and (ii) if the access, disclosure or loss that constituted the eligible data breach of the entity is an eligible data breach of one or more other entities—such an eligible data breach of those other entities; as if that subsection required compliance with subsection 26WL(2) before the end of a period specified in the declaration. (2) The Commissioner’s power in paragraph (1)(d) may only be used to extend the time for compliance with subsection 26WL(2) to the end of a period that the Commissioner is satisfied is reasonable in the circumstances. (3) The Commissioner must not make a declaration under subsection (1) unless the Commissioner is satisfied that it is reasonable in the circumstances to do so, having regard to the following: (a) the public interest; (b) any relevant advice given to the Commissioner by: (i) an enforcement body; or (ii) the Australian Signals Directorate of the Defence Department; (c) such other matters (if any) as the Commissioner considers relevant. (4) Paragraph (3)(b) does not limit the advice to which the Commissioner may have regard. (5) The Commissioner may give a notice of a declaration to an entity under subsection (1): (a) on the Commissioner’s own initiative; or (b) on application made to the Commissioner by the entity. 16 Privacy Amendment (Notifiable Data Breaches) Act 2017 Authorised Version C2017A00012 No. 12, 2017