Unauthorised use or disclosure
(1) A person contravenes this subsection if:
(a) the person is, or has been, an entrusted person or a person covered by subsection (2); and
(b) the person has obtained or generated information in the course of or for the purposes of:
(i) performing functions or duties, or exercising powers, under this Act; or
(ii) assisting another person to perform functions or duties, or exercise powers, under this Act; and
(c) the information is protected information; and
(d) the person uses or discloses the information.
Note: The physical elements of offences against subsections (5) and (6) are set out in this subsection (see section 534).
(2) The following persons are covered by this subsection:
(a) a person employed or engaged by the Commonwealth or a body corporate that is established by a law of the Commonwealth;
(b) a biosecurity official;
(c) a chief human biosecurity officer;
(d) a human biosecurity officer;
(e) a biosecurity industry participant or an officer or employee of a biosecurity industry participant;
(f) a survey authority or an officer or employee of a survey authority;
(g) a person who has carried out, or is carrying out, an audit under section 436.
Exception--required or authorised by law
(3) Subsection (1) does not apply if the use or disclosure of the information is required or authorised by:
(a) this Act or another law of the Commonwealth; or
(b) a law of a State or Territory prescribed by regulations made for the purposes of this paragraph.
Note: A defendant bears an evidential burden in relation to the matters in this subsection (see subsection 13.3(3) of the Criminal Code and section 96 of the Regulatory Powers Act).
(4) Subsection (1) does not apply if the person uses or discloses the information in good faith:
(a) in the purported performance of functions or duties, or the purported exercise of powers, under this Act; or
(b) in assisting another person in the purported performance of the other person's functions or duties, or the purported exercise of the other person's powers, under this Act.
Note: A defendant bears an evidential burden in relation to the matters in this subsection (see subsection 13.3(3) of the Criminal Code and section 96 of the Regulatory Powers Act).
(5) A person commits an offence if the person contravenes subsection (1).
Penalty: Imprisonment for 2 years or 120 penalty units, or both.
(6) A person commits an offence of strict liability if the person contravenes subsection (1).
(7) A person is liable to a civil penalty if the person contravenes subsection (1).
Civil penalty: 120 penalty units.