A person commits an offence if:
(a) the person obtains information; and
(b) the information is protected information; and
(c) the person makes a record of, discloses or otherwise uses the information; and
(d) the making of the record, or the disclosure or use, is not authorised by section 22.
Penalty: Imprisonment for 2 years or 120 penalty units, or both.