(1) A service provider must not, without reasonable excuse, access, use or disclose any police information other than for a purpose for which the information was given or made available to the service provider.
Penalty: In the case of an individual, 240 penalty units or imprisonment for 2 years or both;
In the case of a body corporate, 1200 penalty units.
(2) Without limiting what may be a reasonable excuse, it is a reasonable excuse if the service provider took reasonable steps not to access, use or disclose the police information.
See also section 72 of the Criminal Procedure Act 2009 , which deals with the evidential burden of proof.
(3) In determining the purposes for which police information given or made available to a service provider may be accessed, used or disclosed by the service provider, regard must be had to the Chief Commissioner's instructions.
(4) Subsection (3) does not limit the matters to which regard may be had in determining the purposes for which police information given or made available to a service provider may be accessed, used or disclosed by the service provider.