| (a) | - | being a requesting entity, uses the identity information of an individual in contravention of sub-section (2) of section 8; or |
| (b) | - | being an offline verification-seeking entity, uses the identity information of an individual in contravention of sub-section (2) of section 8A, |