Schedule 4 Telecommunications data confidentiality (b) the document consists (wholly or partly) of any of the following: (i) an authorisation under Division 3; (ii) the revocation of such an authorisation; (iii) the notification of such a revocation. Penalty: Imprisonment for 2 years. (3) Paragraphs (1)(a) and (2)(a) do not apply to a disclosure of information or a document if: (a) the disclosure is for the purposes of the authorisation, revocation or notification concerned; or (b) the disclosure is reasonably necessary: (i) to enable the Organisation to perform its functions; or (ii) to enforce the criminal law; or (iii) to enforce a law imposing a pecuniary penalty; or (iv) to protect the public revenue. Note: A defendant bears an evidential burden in relation to the matter in subsection (3) (see subsection 13.3(3) of the Criminal Code). Uses (4) A person commits an offence if: (a) the person uses information; and (b) the information is about any of the following: (i) whether an authorisation under Division 3 has been, or is being, sought; (ii) the making of such an authorisation; (iii) the existence or non-existence of such an authorisation; (iv) the revocation of such an authorisation; (v) the notification of such a revocation. Penalty: Imprisonment for 2 years. (5) A person commits an offence if: (a) the person uses a document; and (b) the document consists (wholly or partly) of any of the following: (i) an authorisation under Division 3; (ii) the revocation of such an authorisation; 44 Cybercrime Legislation Amendment Act 2012 No. 120, 2012 ComLaw Authoritative Act C2012A00120