S.L. 460.41 Art. 34Proceedingsforthe imposition of administrative penalties. 

(1) Independently of whether a penalty is issued upon the entity concerned, the CIP Department, or where designated the competent authority may, in accordance with article 31 require the entity to comply with the following provisions as applicable:

(a) cybersecurity risk-management measures and, or reporting obligations in articles 19 and 20;

(b) enforcement measures in article 29(6)(a) to (k), article 30(6)(a) to (j) and article 31(10);

(c) any other law or measure applicable to ensure compliance and enforcement, taken by the CIP Department, or where designated the competent authority.

(2) The Committee shall notify the entity concerned of the following:

(a) the administrative penalty that shall be imposed;

(b) the specific reasons on the basis of which the administrative penalty shall be imposed;

(c) the amount of the administrative penalty;

(d) the timeframe within which the entity concerned shall pay the administrative penalty:

Provided that the timeframe referred to in article 34(2)(d) shall be not more than twenty (20) working days or not less than five

(5) working days from the date of service of the notice.

(3) Deleted by Legal Notice 89 of 2026.

(4) Deleted by Legal Notice 89 of 2026.

(5) Deleted by Legal Notice 89 of 2026.

(6) Deleted by Legal Notice 89 of 2026.

35. Deleted by Legal Notice 89 of 2026.

36. Deleted by Legal Notice 89 of 2026.