Any entity, Commonwealth body or State body that obtains information provided to the Board under ss 48, 49 or 51 may record, use or disclose it only for the same purposes and never to investigate or enforce a contravention by the original provider of a law other than Part 5 or a criminal law, subject to the Privacy Act, with carve-outs for lawfully public information (including the published final report), an individual's own personal information, the provider's own information and its consented use, and a State's constitutional functions; an entity other than a Commonwealth officer contravening the limit where the information is sensitive without consent, confidential or commercially sensitive, or damaging to security, defence or international relations is liable to 60 penalty units.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.