(1) A person commits an offence if—
(a) the person accesses information on the ACT DNA database; and
(b) the access is not authorised under this section.
Maximum penalty: 200 penalty units, imprisonment for 2 years or both.
(2) A person may access information stored on the ACT DNA database for 1 or more of the following purposes:
(a) the purpose of forensic comparison permitted under section 97;
(b) the purpose of making the information available, in accordance with the regulations, to the person to whom the information relates;
(c) the purpose of administering the ACT DNA database;
(d) the purpose of, and in accordance with, an arrangement entered into under section 102 (Database information) for the provision of access to information on the ACT DNA database by law enforcement officers or anyone else prescribed by regulation;
(e) the purpose of the Mutual Assistance in Criminal Matters Act 1987
(Cwlth) or the Extradition Act 1988
(Cwlth);
(f) the purpose of a coronial inquest or inquiry;
(g) the purpose of investigation of a complaint by the information privacy commissioner (or someone who has corresponding functions under the law of another participating jurisdiction).
(3) The following entities may access information on the ACT DNA database for the purpose of reviewing or auditing the database:
(a) the auditor-general;
(b) the human rights commissioner;
(c) the ombudsman;
(d) the information privacy commissioner;
(e) an entity of another participating jurisdiction prescribed by regulation;
(f) any other entity prescribed by regulation.
(4) This section does not apply to information that cannot be used to discover the identity of anyone.