A person who learns the identity of a discloser, or information likely to identify them, because of a protected disclosure must not disclose it except as authorised: to the Commissioner, the Agency, police or a prosecutor, a lawyer for advice on Division 7, a court, tribunal or Royal Commission, with the discloser's consent, to lessen or prevent a serious threat to safety, health or wellbeing, for a complaint the discloser elects, or where already lawfully public. Information other than identity may be shared where reasonably necessary to deal with the contravention if all reasonable steps are taken to avoid identification. Civil penalty: 30 penalty units.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.