16 Data Protection Act, 2018 - 5. 34. Whistleblower’s protection. An employer whether or not a public body, shall not dismiss, suspend, demote, discipline, harass or otherwise disadvantage an employee or deny that employee of a benefit, because— (a) the employee acting in good faith, and on the basis of reasonable belief has— (i) notified the Commissioner that the employer or any other person has contravened or is about to contravene this Act; (ii) done or stated the intention of doing anything that is required to be done in order to avoid having any person contravene this Act; or (iii) refused to do or stated the intention of refusing to do anything that is in contravention of this Act; or (b) the employer believes that the employee will do anything described in paragraph (a) PART VII OFFENCES 35. Willful disclosure. (1) A person who wilfully discloses personal information in contravention of this Act, commits an offence. (2) A person who collects, stores or disposes of personal information in a manner that contravenes this Act, commits an offence. 36. Breach of confidentiality. A person who breaches the confidentiality obligations established by section 34, commits an offence. 37. Penalties for corporations. Where a corporation commits an offence under this Act, any officer, director or agent of the corporation who directed, authorised, assented to, or participated in the commission of the offence is a party to and commits an offence and is liable to the punishment provided for the offence. 38. Penalties for offences. (1) A person who commits an offence under this Act for which a penalty is not specifically provided for is liable upon— (a) summary conviction, to a fine of not more than fifty thousand dollars or to imprisonment for a term of three years; and (b) conviction on indictment, to a fine of not more than one hundred thousand dollars or to imprisonment for a term of not more than five years. (2) Where the offences under this Act is committed by a body corporate, the body corporate shall be liable upon—