(b) there is a risk or vulnerability that the specified computer data may be modified,
lost, destroyed or rendered inaccessible.
(2) The police officer or authorised person may serve the written notice on any person in
possession or control of the computer, computer program, computer system, device or
computer data, requiring the person to expeditiously preserve the specified computer data.
(3) The written notice must specify a maximum period of 90 days for which the specified
computer data is to be preserved and maintained for integrity and may be renewed once, for a
further maximum period of 90 days.
(4) A person who is served a written notice must keep the notice and all information about
it confidential, unless expressly permitted by the police officer or authorised person.
(5) A person who contravenes this section commits an offence and is liable on conviction
to––
(a) in the case of an individual, a fine not exceeding $10,000 or imprisonment for a
term not exceeding 5 years or both; and
(b) in the case of a body corporate, a fine not exceeding $50,000.
Expedited preservation and partial disclosure of traffic data
20. ––(1) If a police officer or other authorised person is satisfied that––
(a) any specified traffic data stored in any computer system or computer data
storage medium or by means of a computer system in the possession of or
controlled by a service provider is reasonably required for the purposes of a
criminal investigation; and
(b) there is a risk or vulnerability that the specified traffic data may be modified,
lost, destroyed or rendered inaccessible,
the police officer or other authorised person may, by written order given to the service provider
in possession or control of the computer system or computer data storage medium, require the
service provider to––
(i) undertake expeditious preservation and maintenance of integrity of the specified traffic
data for a period specified in the notice not exceeding 90 days, regardless of whether one
or more service providers were involved in the transmission of that communication; and
(ii) disclose sufficient traffic data about any communication to identify––
(A) the service provider; and
(B) the path through which the communication was transmitted.
(2) On application by the police officer or authorised person, the period of preservation and
maintenance for integrity may be extended beyond 90 days if a judge authorises an extension
for a further specified period of time, provided the judge is satisfied that––
(a) such extension of preservation is reasonably required for the purposes of a criminal
investigation or prosecution;
12