A person commits an offence if:
(a) the person uploads, or causes to be uploaded, data from a communication device to the National COVIDSafe Data Store; and
(b) the data is COVID app data; and
(c) consent to the upload has not been given by:
(i) the COVIDSafe user in relation to that device; or
(ii) if the COVIDSafe user is unable to give consent--a parent, guardian or carer of the COVIDSafe user; or
(iii) if the COVIDSafe user has requested a parent, guardian or carer of the COVIDSafe user to act on the COVIDSafe user's behalf--that parent, guardian or carer.
Penalty: Imprisonment for 5 years or 300 penalty units, or both.