PART 4 PROCEDURES 25 Subscriber data, traffic data and content data to be used for lawful purposes only Subscriber data obtained under section 21 is to be used: (1) (a) __ for the purposes for which it was originally obtained; or (2) @) (b) to enforce any criminal law imposing a pecuniary penalty, or to protect the public revenue: or (c) to enforce a foreign forfeiture order or a forcign pecuniary penalty order in connection with a foreign serious offence under the Mutual Assistance in Criminal Matters Act. Traffic data obtained in real time is to be used: (a) for the purpose for which it was originally obtained; or (b) to enforce any criminal law imposing a pecuniary penalty, or to protect the public revenue; or (c) to enforce a foreign serious offence according to an authorisation made under the Mutual Assistance in Criminal Matters Act. Content data preserved under section | 8is to be used: (a) (b) (c) (4) Q@) to enforce a specified offence or an offence under this Part; or fo enforce a foreign serious offence accotding to an authorisation made under the Mutual Assistance in Criminal Matters Act. If the Comtnissioner is satisfied that the information obtained is no longer required, the Commissioner must arrange for the destruction of the data and any reproduction of the data to be under the control of the Vanuatu Police Force, Division 4 2G for the purposes for which the content data was originally obtained; Or Disclosure to a foreign law enforcement agency # Disclosure 40.0 forcign Jaw.onforsement agency ! Information obtained under this Part must not be disclosed to a foreign law enforcement agency unless the disclosure has been authorised by the Commissioner. Cybercrime Act No. 22 of 2021 23

Select target paragraph3