s 28 Obligation of confidentiality
28.—(1) A person must not disclose any information which has been obtained by him or her in the performance of his or her duties or the exercise of his or her powers under this Act, unless such disclosure is made —(a) with the permission of the person from whom the information was obtained or, where the information is the confidential information of a third person, with the permission of the third person; (b) for the purpose of the administration or enforcement of this Act; (c) for the purpose of assisting any public officer or officer of any other statutory board in the investigation or prosecution of any offence under any written law; or (d) in compliance with the requirement of any court or any written law. (2) For the purposes of this section, the reference to a person disclosing any information includes the person permitting any other person to have access to any electronic record, book, register, correspondence, information, document or other material which has been obtained by the firstmentioned person in the performance of his or her duties or the exercise of his or her powers under this Act. (3) Any person who contravenes subsection (1) shall be guilty of an offence and shall be liable on conviction to a fine not exceeding $10,000 or to imprisonment for a term not exceeding 12 months or to both.