(1) A person who is, or has been, a person exercising functions under this Law must not use protected information other than for an authorised use.
Maximum penalty—$20000.
(2) However, subsection (1) does not apply to the Regulator using protected information for making a disclosure mentioned in section 728(2).
(3) A person to whom protected information is disclosed under section 728(3)(a) must not use the protected information other than for the authorised use for which it was disclosed to the person.
Maximum penalty—$20000.