(1) A person must not, without reasonable excuse, access, use or disclose any data or information obtained by the person under this Act other than—
(a) in accordance with this Act; or
(b) in connection with the performance of functions under this Act.
Penalty: 240 penalty units or 2 years imprisonment or both.
(2) Without limiting what may be a reasonable excuse, it is a reasonable excuse if the access, use or disclosure was made—
(a) in good faith for the purposes of this Act; or
(b) with the consent of the person to whom the information relates; or
(c) to a court or tribunal in the course of legal proceedings; or
(d) pursuant to an order of a court or tribunal; or
(e) to the extent reasonably required to enable the investigation or the enforcement of a law of this State or of any other State or of a Territory or of the Commonwealth; or
(f) to an Australian legal practitioner for the purpose of obtaining legal advice or representation; or
(g) as required or authorised by or under this Act or any other Act.