99Offence—unauthorised access, recording, disclosure or use of protected information

99  Offence—unauthorised access, recording, disclosure or use of protected information  (a) the person:  (i) obtains information; or  (ii) makes a record of information; or  (iii) discloses information to another person; or  (iv) uses information; and  (b) the person is not authorised or required by or under this Act:  (i) to obtain the information; or  (ii) to make the record of the information; or  (iii) to disclose the information; or  (iv) to use the information; and  (2) Subsection (1) does not apply if:  (a) the person did not obtain the information under, for the purposes of, or in connection with, the scheme; or  (b) the person had already obtained the information before the person obtained the information under, for the purposes of, or in connection with, the scheme. Note: A defendant bears an evidential burden in relation to the matter in this subsection (see subsection 13.3(3) of the Criminal Code).