(1) A person commits an offence if:
(a) the person uses or discloses information; and
(b) the information is personal information that relates to a verification request or an assessment in relation to an individual.
(2) Subsection (1) does not apply if the use or disclosure is in accordance with, or as otherwise authorised by, this Act or any other law.
Note: A defendant bears an evidential burden in relation to the matter in subsection (2) (see subsection 13.3(3) of the Criminal Code ).