(1) A director or an employee of the Authority shall sign a secrecy and confidentiality instrument in a form specified by the Authority.
(2) Subject to subsection (3), a director or an employee of the Authority shall not disclose to another person information relating to —
(a) the business affairs of the Authority;
(b) the affairs of a customer or director,
that the director or employee has acquired in the course of his or her functions or in the exercise of the Authority's functions under this Act or any other law.
(3) Subsection (2) does not apply to a disclosure —
(a) in respect of the affairs of a director or customer, with the consent of the director or the customer, which consent has been voluntarily given;
(b) for the purpose of enabling or assisting the Authority in exercising a function conferred on it under this Act or any other law;
€ if the information disclosed is or has been available to the public from another source;
(d) if the information disclosed is in a summary or in statistics expressed in a manner that does not enable the identity of a customer or director to which the information relates, to be ascertained;
€ lawfully made to a person with a view to the institution of, or for the purpose of —
(i) criminal proceedings, or
(ii) disciplinary proceedings relating to the discharge of duties by a director or employee of the Authority; or
(f) for the purposes of legal proceedings pursuant to a court order.
(4) A person who contravenes subsection (2) commits an offence and is liable on summary conviction to a fine not exceeding $10,000 or to a term of imprisonment not exceeding 2 years or to both and in the case of a director, to revocation of his or her appointment.