(1) A person must not,
directly or indirectly, record, use or disclose information obtained by the
person because of a function that the person has, or at any time had, under
this Act.
Penalty for this subsection: imprisonment for 12
months.
(2) Subsection (1)
does not apply to the recording, use or disclosure of information —
(a) for
the purpose of performing a function under this Act; or
(b) as
required or allowed under this Act or another written law; or
(c)
under an order of a court or other person or body acting judicially; or
(d) for
the purpose of a proceeding under Part 5 or another proceeding before a court
or other person or body acting judicially; or
(e) for
the purpose of the investigation of a suspected offence or the conduct of
proceedings against a person for an offence; or
(f) with
the written consent of —
(i)
the person to whom the information relates; or
(ii)
an executor or administrator of the estate of that
person.
(3) Subsection (1)
does not apply to the recording, use or disclosure of statistical or other
information that is not personal information.