Commonwealth Consolidated Acts Commonwealth Consolidated ActsAn eligible data breach declaration ceases to be in force at the earliest of the following:
(a) if a time at which the declaration will cease to be in force is specified in the declaration--at that time;
(b) the time at which the declaration is repealed;
(c) the start of the day after the end of the period of 12 months beginning on the day the declaration commences.