Prohibition on recording or disclosure of, or access to, information by entrusted persons
30 Prohibition on recording or disclosure of, or access to, information by entrusted persons
Offence for recording or disclosing information
A person commits an offence if:
the person is, or has been, an entrusted person; and
the person has obtained protected information in the person’s capacity as an entrusted person; and
the person:
makes a record of the information; or
discloses the information to another person.
The fault element for the physical elements in paragraphs (a) and (b) is recklessness: see section 5.6 of the Criminal Code.
Penalty: Imprisonment for 2 years.
Offence for accessing information
A person commits an offence if:
the person is an entrusted person; and
the person accesses protected information.
The fault element for the physical elements in paragraph (a) is recklessness: see section 5.6 of the Criminal Code.
Penalty: Imprisonment for 2 years.
Exceptions
Each of the following is an exception to the prohibition in subsection (1) or (2):
the conduct is authorised by a law of the Commonwealth or of a State or Territory;
the conduct is in compliance with a requirement under a law of the Commonwealth or of a State or Territory.
A defendant bears an evidential burden in relation to the matter in subsection (3): see subsection 13.3(3) of the Criminal Code.
For paragraph (3)(a), see also sections 31 to 35 which authorise conduct.
Definitions of entrusted person and protected information
In this Act:
entrusted person means:
the Secretary; or
an APS employee in the Department; or
a person who is:
an employee of an Agency (within the meaning of the Public Service Act 1999); or
an officer or employee of a State or Territory; or
an officer or employee of a government authority; or
an officer or employee of the government of a foreign country; or
an officer or employee of an authority of a foreign country; or
an officer or employee of a public international organisation (within the meaning of section 70.1 of the Criminal Code);
and whose services are made available to the Department; or
a contractor engaged to provide services to the Department in connection with an approved identity verification facility (whether the contractor is engaged directly by the Commonwealth or as a subcontractor); or
an officer or employee of such a contractor whose duties relate wholly or partly to an approved identity verification facility.
protected information means any of the following:
identification information that was obtained by a person, in the person’s capacity as an entrusted person, from:
an electronic communication to or from an approved identity verification facility; or
the NDLFRS;
information about either of the following:
the making, content or addressing of an electronic communication made to or from an approved identity verification facility;
identification information relating to a particular individual held in, or generated using, the NDLFRS;
that was obtained by a person, in the person’s capacity as an entrusted person;
information that enables access to an approved identity verification facility and was obtained by a person, in the person’s capacity as an entrusted person.
This Act’s bill:Explanatory memorandumSecond reading speech
The statute text is free to read above. View subscription options to unlock the case-law research tools for each provision.