Penalties 40. (1) Any member, permanent of substitute, personnel, consultant, contractor or other member of staff of the Authority or any expert who has violatesd the provisions of this obligation of secrecy referred to in this Act shall be shall be guilty of an offence and liable to a fine not exceeding level seven or to imprisonment for a period not exceeding two years or to both such fine and such imprisonment. Draft Data Protection Bill Version 1.0 47