(1) An unauthorised person who

(a) causes a computer or any other electronic device of the Authority to perform a function with the intent to obtain access to any programme or data held in that computer by the Authority, or

(b) attempts to access personal information held by the Authority contrary to this Act, commits an offence and is liable on summary conviction to a fine of not more than five thousand penalty units or to a term of imprisonment of not more than ten years or to both

(2) A person who aids or abets another person to commit an offence under subsection (1) is liable on summary conviction to a fine of not more than five thousand penalty units or to a term of imprisonment of not more than ten years or to both.

(3) A person who has custody or control of a programme, data or other information which is held in or retrieved from a computer or any other electronic device that belongs to the Authority and which that person is not authorised to have custody of or control, shall be treated as having obtained unauthorised access to the programme, data or information unless otherwise proved.