Section 40, The Payment Systems Act, 2009

(1) Subject to subsections (2) and (3), no person being– 28 29 Obligation to consult. Obligation to notify. Power to delegate. Preservation of secrecy. Delegation of functions or powers. (a) an officer or employee of the Central Bank; or (b) an officer, employee or member of a management body, shall disclose any information which he has acquired in the performance of his functions under this Act or the constitution or rules of any system and which relates to the affairs of a participant in a system. (2) The Central Bank may disclose any information where in it’s opinion, disclosure is reasonably necessary to protect the integrity, effectiveness or security of a system. (3) Subsection (1) shall not apply to– (a) any disclosure made by the person concerned– (i) in the performance of his functions under this Act; (ii) under the constitution or rules of any system; (iii) when required to do so by order of a court; or (iv) when required to do so under any other enactment; or (b) the disclosure of information that is generally known to members of the public or to a substantial section of the public. (4) Any person who contravenes subsection (1) commits an offence and shall be liable on conviction to a fine not exceeding Le15,000,000 or to a term of imprisonment not exceeding two years or to both the fine and imprisonment. .