65UUnauthorised use or disclosure of protected information—entrusted person

#### 65U Unauthorised use or disclosure of protected information—entrusted person Unauthorised use or disclosure (1) A person contravenes this subsection if: (a) the person is, or has been, an entrusted person; and (b) the person has obtained relevant information in the person’s capacity as an entrusted person; and (c) the information is protected information; and (d) the person uses or discloses the information. Exceptions (2) However, subsection (1) does not apply if the use or disclosure is authorised or required by: (a) this Act; or (b) any other law of the Commonwealth; or (c) a prescribed law of a State or a Territory. > Note: A person who wishes to rely on this subsection bears an evidential burden in relation to the matter in this subsection. See subsection 13.3(3) of the Criminal Code and section 96 of the Regulatory Powers Act. Fault‑based offence (3) A person commits an offence if the person contravenes subsection (1). > Note: The physical elements of an offence against this subsection are set out in subsection (1) (see subsection 6B(3)). Penalty: Imprisonment for 2 years or 180 penalty units, or both. Strict liability offence (4) A person commits an offence of strict liability if the person contravenes subsection (1). Penalty: 60 penalty units. Civil penalty provision (5) A person is liable to a civil penalty if the person contravenes subsection (1). Civil penalty: 300 penalty units.