(1) A person who
misuses information obtained by reason of any function that person has, or at
any time had, in the administration of this Act commits an offence.
Penalty: a fine of $20 000.
(2) A person misuses
information if it is, directly or indirectly, recorded, used, or disclosed to
another person, other than —
(a) in
the course of duty under this Act;
(b)
under this or any other Act;
(c) for
the purposes of the investigation of any suspected offence or the conduct of
proceedings against any person for an offence;
(d) in a
manner that could not reasonably be expected to lead to the identification of
any person to whom the information refers; or
(e) with
the consent of the person to whom the information relates, or each of them if
there is more than one.
(3) In this
section —
“information” means information
concerning the affairs of a person.