394Use or disclosure for research, policy development or data analysis

394  Use or disclosure for research, policy development or data analysis  (1) An entrusted person may:  (a) use relevant information; or  (b) disclose relevant information to an entrusted person; or  (c) disclose relevant information to another person or body; for the purposes of the person or body undertaking research, policy development or data analysis to assist the Department with:  (d) the administration of this Act; or  (e) achieving one or more objects of this Act.  (2) An entrusted person is not authorised under paragraph (1)(c) to disclose relevant information to:  (a) another person who is not employed or engaged by the Commonwealth or a body corporate that is established by a law of the Commonwealth; or  (b) a body that is not a Commonwealth entity; unless:  (c) the other person or body has undertaken not to use or further disclose the information except in accordance with an agreement that:  (i) is in force between the Commonwealth and that person or body; and  (d) the entrusted person is satisfied that the information will be used or further disclosed only in accordance with the agreement.  (3) An entrusted person is not authorised under paragraph (1)(c) to disclose relevant information unless the entrusted person is satisfied that:  (a) in the case of research, policy development or data analysis that could not proceed if personal information were de‑identified before the relevant information is disclosed—only the minimum amount of personal information necessary to proceed is disclosed; or  (b) otherwise—all reasonable steps have been taken to de‑identify any personal information before the relevant information is disclosed.