(1) If:
(a) a person intentionally obtains information; and
(b) the person is not authorised by or under the social security law to obtain the information; and
(c) the person knows or ought reasonably to know that the information is protected information;
the person commits an offence.
(2) An offence against subsection (1) is punishable on conviction by imprisonment for a term not exceeding 2 years.
(3) Strict liability applies to the element of an offence against subsection (1) that a person not authorised to do something is not authorised by or under the social security law to do that thing.