(1) Subsection (2) applies to the Secretary for Justice and every other chief executive of a government department or law enforcement agency that holds, or has access to, criminal records.
(2) A chief executive to whom this subsection applies must take all reasonable steps (including, without limitation, the development of policies and procedures) to ensure the government department or law enforcement agency for which he or she is chief executive, and any employee or contractor of that government department or law enforcement agency—
(a) conceals the criminal records of eligible individuals when requests are made for their disclosure other than by the eligible individuals to whom the criminal records relate; and
(b) does not use the criminal records of eligible individuals other than for a purpose authorised under this Act.
(3) Subsection (2)(a) is subject to the exceptions in section 19.