22Authorised dealings with protected information

#### 22 Authorised dealings with protected information Uploading personal information etc. to the AI register (1) A person may collect, make a record of, disclose or otherwise use: (a) personal information; or (b) relevant identifying information; or (c) information that is commercial‑in‑confidence; if the person does so for the purposes of including the information in the AI register. > Note: This subsection is an authorisation for the purposes of other laws, including the Australian Privacy Principles. Using or disclosing protected information in the AI register (2) A person may make a record of, disclose or otherwise use protected information if: (a) the person does so for the purposes of the AI register, and the person is: (i) an officer or employee of the Commonwealth or of an authority of the Commonwealth; or (ii) engaged by the Commonwealth, or by an authority of the Commonwealth, to perform work relating to the purposes of the AI register; or (iii) an officer or employee of, or is engaged by, a person referred to in subparagraph (ii) to perform work relating to the purposes of the AI register; or (iv) a prescribed body; or (v) a recognised vaccination provider; or (b) the person is authorised to do so under subsection (3); or (c) the person does so for the purposes of performing the person’s functions, or exercising the person’s powers, under this Act; or (ca) the person does so for the purposes of including information in the register kept under Part 2 of the National Cancer Screening Register Act 2016; or (d) the person is required or authorised to do so by or under a law of the Commonwealth or of a State or Territory; or (e) the person does so for the purposes of court or tribunal proceedings, or in accordance with an order of a court or tribunal; or (f) the person does so for the purposes of a coronial inquiry, or in accordance with an order of a coroner. > Note 1: This subsection is an authorisation for the purposes of other laws, including the Australian Privacy Principles. > Note 2: Protected information is not limited to information in the register (see section 4). It can also cover information that: (a) is obtained as the result of a disclosure from the register, whether directly or indirectly because of one or more on‑disclosures; or (b) is derived from information that was in the register. (3) The Minister may, in writing, authorise a person to make a record of, disclose or otherwise use protected information for a specified purpose that the Minister is satisfied is in the public interest. (4) Paragraph (2)(a) does not apply to personal information to the extent that a disclosure under that paragraph would be contrary to a request in force under subsection 11(2).