(1) This section applies to a person who is or has been—
(a) a member of the Authority's Board of Management; or
(b) appointed for the purposes of this Act; or
(c) engaged as a member of the Authority's staff; or
(d) authorised to perform a function or exercise a power of, or on behalf of, the Authority.
(2) Subject to section 11, a person to whom this section applies must not, except to the extent necessary to perform official duties or to perform a function or exercise a power of, or on behalf of, the Authority—
(a) directly or indirectly make a record of or disclose to any other person any information acquired by the person because he or she is or has been a person to whom this section applies; or
(b) make use of any such information for any purpose other than—
(i) the performance of official duties; or
(ii) the performance of a function or exercise of a power of, or on behalf of, the Authority.
Penalty: 100 penalty units.