Where a person has acquired personal information about another person and the first - mentioned person knows or ought reasonably to know that the person from whom he or she acquired the information was subject to an obligation of confidence with respect to the information, the first - mentioned person, whether he or she is in the Australian Capital Territory or not, is subject to a like obligation.