130Register of data sharing agreements

130 Register of data sharing agreements

(1) The Commissioner must maintain a register of data sharing agreements. The register must include a publicly accessible part and a part that is not publicly accessible. (2) Subject to subsection (4), the Commissioner must include in the part of the register that is publicly accessible the following details in relation to each registered data sharing agreement: (a) the entities that are parties and the capacity in which each entity is a party; (b) the date the parties entered into the agreement; (c) the date the Commissioner registered the agreement; (d) a description of the project the agreement covers; (e) the data sharing purpose of the project; (f) a description of the data to be shared; (g) whether personal information is to be shared; (h) if personal information is to be shared—a statement in the approved form (if any) relating to the privacy obligations applicable to the accredited user in relation to its use of output of the project and the person or body to whom individuals may complain about use inconsistent with those obligations; (i) if subsection 16B(7) applies in relation to the agreement—a copy of the statement and explanation required by that subsection; (j) if subsection 16B(8) applies in relation to the agreement—a copy of the statement required by that subsection; (k) if, but for section 23, sharing, collecting or using data under the agreement would contravene another law—the title of the other law; (l) a statement of how the project will serve the public interest; (m) a description of the final output of the project; (n) if output of the project may exit the data sharing scheme under section 20E—the circumstances in which the exit may occur; (o) if the agreement has an expiry date—the expiry date; (p) whether the agreement is in effect or has expired or been terminated; (q) if any details are affected by a variation of the agreement—the details as varied and the date the variation was registered; (r) any other details prescribed by the rules to be included in the publicly accessible part of the register. (3) The rules may prescribe circumstances in which details mentioned in subsection (2) must not be included in the publicly accessible part of the register. (4) The Commissioner must include in the part of the register that is not publicly accessible: (a) copies of data sharing agreements and variations given to the Commissioner under section 33; and (b) any details prescribed for the purposes of subsection (3); and (c) any details prescribed by the rules to be included in the part of the register that is not publicly accessible. (5) The register may be maintained in any form the Commissioner considers appropriate. (6) The register is not a legislative instrument.