20Regulations relating to the healthcare identifier and identifying information of a healthcare recipient etc.

#### 20 Regulations relating to the healthcare identifier and identifying information of a healthcare recipient etc. Collection, use or disclosure for other purposes (1) The regulations may authorise the collection, use or disclosure of the following information: (a) identifying information of a healthcare recipient, authorised representative of a healthcare recipient or nominated representative of a healthcare recipient; (b) the healthcare identifier of a healthcare recipient, authorised representative of a healthcare recipient or nominated representative of a healthcare recipient. Adoption for other purposes (2) The regulations may authorise the adoption of the healthcare identifier of a healthcare recipient, authorised representative of a healthcare recipient or a nominated representative of healthcare recipient in the circumstances prescribed by the regulations. Purposes for which regulation‑making powers in subsections (1) and (2) may be used (3) However, the regulations may only authorise the collection, use, disclosure or adoption of that information for purposes related to one or more of the following: (a) providing healthcare to healthcare recipients, or a class of healthcare recipients; (b) determining whether adequate and appropriate healthcare is available to healthcare recipients, or a class of healthcare recipients; (c) facilitating the provision of adequate and appropriate healthcare to healthcare recipients, or a class of healthcare recipients; (d) assisting persons who, because of health issues (including illness, disability or injury), require support; (e) the My Health Record system. Procedures relating to the disclosure of healthcare identifiers (4) The regulations may prescribe rules about the process for disclosing the healthcare identifiers of healthcare recipients, including rules about requests to the service operator to disclose healthcare identifiers of healthcare recipients. (4A) Without limiting subsection (4), the regulations may prescribe rules about requirements that must be complied with, including any requirements specified in a data standard: (a) before a request may be made to the service operator to disclose the healthcare identifier of a healthcare recipient; or (b) if the service operator discloses a healthcare identifier of a healthcare recipient. Information about disclosures by service operator (5) If the service operator discloses a healthcare identifier of a healthcare recipient to an entity, the regulations may require the entity to provide prescribed information to the service operator in relation to the disclosure.