That's my point. The Security of Information Act defines “operational information”, but it doesn't define “operations”. On the face of it, “operations” and “activities” are synonyms, but it's not something that's defined in law or is anchored in this act.
On November 29th, 2016. See this statement in context.