(1) A member of the Board and an employee of the Agency shall take the prescribed oath of secrecy.
(2) Subject to subsection (3), a member of the Board or an employee of the Agency —
(a) shall preserve the confidentiality with respect to matters coming to his or her knowledge in the performance of his or her duties;
(b) shall not disclose to another person information that a member of the Board or employee has acquired in the course of his or her duties or in the exercise of the Agency's functions under this Act or any other law, relating to —
(i) the business affairs of the Agency, or
(ii) the affairs of a member of the Board or an employee of the Agency;
(c) shall not permit a person to have access to records in the possession or control of the Agency.
(3) Subsection (2) does not apply to disclosure —
(a) in respect of the affairs of a member of the Board with the consent of the member of the Board;
(b) for the purpose of enabling or assisting the Agency in exercising a function conferred on it under this Act or any other law;
(c) if the information disclosed is or has been available to the public from another source;
(d) if the information disclosed is in a summary or in statistics expressed in a manner that does not enable the identity of a member of the Board, young person or employee of the Agency to which the information relates, to be ascertained;
(e) lawfully made to a person with a view to the institution of, or for the purpose of —
(i) criminal proceedings,
(ii) disciplinary proceedings relating to the discharge of duties by a member of the Board or employee of the Agency, or
(iii) legal proceedings pursuant to a court order.
(4) Where a member of the Board or an employee of the Agency contravenes subsection (2) —
(a) in the case of a member of the Board, his or her appointment may be revoked under section 19;
(b) in the case of an employee of the Agency, his or her employment may be terminated.