(1) An authorized officer who receives information in the performance of functions under this Act shall not

(a) communicate the information to an unauthorized person, or

(b) disclose the personal details of a person who has given information to a third person without authority.

(2) An authorized officer who contravenes subsection (1) commits an offence and is liable on summary conviction to a fine of not less than five hundred penalty units or to a term of imprisonment of not less than three years or to both.