(1) A person must not
(whether directly or indirectly) record, disclose or use any information
obtained by the person because the person is or was —
(a) a
person to whom —
(i)
details are or were given under section 328(6), (7) or
(8); or
(ii)
a disclosure is or was made under section 328(12);
or
(b) a
person, or a member, officer, employee or agent, of a body, to whom a
complaint is or was referred under section 329(4); or
(c) a
participant in a conciliation under section 332; or
(d) a
participant in an investigation; or
(e) a
person to whom the information is or was provided by a complainant or
respondent for the purpose of providing the complainant or respondent with a
report for use by the complainant or respondent in pursuing or responding to a
complaint; or
(f) a
person who is or was given notice of a decision under section 337(1)(b).
Penalty: a fine of $5 000.
(2) Subsection (1)
does not apply in relation to the recording, disclosure or use of statistical
or other information that is not personal information.
(3) A person does not
commit an offence under subsection (1) if the recording, disclosure or use of
the information is authorised under section 577(1).