Legislative Assembly for the ACT: 2018 Week 12 Hansard (1 November) . . Page.. 4646 ..
undertake an inquiry that is due in four weeks time. In fact, it was brought on to the program so late that it was not even discussed at admin and procedure this Monday just gone. It got listed afterwards. We suspended standing orders to bring it on.
That is fine, and I think it is worthwhile doing, but let us not get too caught in the process and reflect that we try to accommodate a range of things that we need to. In terms of the two amendments I have brought forward, I spoke to them earlier. I think that they add a bit of extra dimension. These committee references usually have the words "any other matter" in them. But I think it is worth drawing out these two matters explicitly. I move the amendments circulated in my name:
(1) Insert new paragraph (1)(d)(iv):
"(iv) greenhouse gas emissions;".
(2) Insert new paragraph (1)(g):
"(g) information privacy;".
Mr Rattenbury's amendments agreed to.
Original question, as amended, resolved in the affirmative.
Cloud storage of Assembly documents
MS J BURCH (Brindabella) (12.21): I move:
That the following continuing resolution be adopted:
AUTHORITY FOR LEGISLATIVE ASSEMBLY INFORMATION TO BE MIGRATED TO, AND STORED AND PROCESSED BY, A CLOUD SERVICE PROVIDER
(1) The Assembly authorises its information, including information captured by standing order 277(p), to be migrated to, and stored and processed by, a cloud service provider (provider), on the following provisos:
(a) a contract has been entered into between the Territory and the provider ensuring any access to the Assembly's information is limited to the sole purpose of providing the service. This should include ensuring any subcontractors engaged by the provider are subject to the same terms and conditions as the provider;
(b) the provider has been certified by the Australian Signals Directorate as suitable for the hosting of data up to the classification of PROTECTED and hosts all ACT Government data in Australia; and
(c) a security risk assessment has been conducted by the Territory to identify relevant security controls to be applied.
(2) In relation to lawful requests for disclosure by the provider of the Assembly's information—
(a) the Clerk will be notified by the Territory's information and communications technology agency (the agency) of any warrant or