(1) A person commits an offence if:
(a) the person obtains access to information; and
(b) the information is personal information that relates to a verification request or an assessment in relation to an individual.
(2) Subsection (1) does not apply if the access is obtained in accordance with, or as otherwise authorised by, this Act or any other law.
Note: A defendant bears an evidential burden in relation to the matter in subsection (2) (see subsection 13.3(3) of the Criminal Code ).