(1)  A person must not disclose any information obtained by the person in the exercise of any powers conferred on the person by this Act, or by virtue of the person's office under this Act, unless the disclosure –

(a) is authorised by each person to whom the information relates; or

(b) occurs in the exercise or performance of the powers or functions of the person; or

(c) occurs in the exercise or performance of the powers or functions that have been delegated to the person, or which the person is authorised to perform, under this Act; or

(d) is authorised under this Act; or

(e) is for the purposes of, or is authorised under, another Act or a law; or

(f) occurs in pursuance of a requirement imposed by or under another Act or a law.

(1A)  Without limiting the circumstances in which a disclosure is authorised under this Act, information may be disclosed by a person who is authorised by or under this Act to obtain the information, if the disclosure is to a person –

(a) for the purpose of enabling the person to conduct study or research that is approved by the Board; or

(b) for the purpose of the collection and analysis of statistical information; or

(c) acting on behalf of a body performing functions similar in whole or in part to the functions of the Board, if the disclosure is authorised by the Board; or

(d) for law enforcement purposes.

(2)  A person who contravenes subsection (1) is guilty of an offence and is liable on summary conviction to a fine not exceeding 5 penalty units.