31Collection, holding, use and disclosure of personal information for identity protection functions

31 Collection, holding, use and disclosure of personal information for identity protection functions

31 Collection, holding, use and disclosure of personal information for identity protection functions

(1) The Secretary may collect, hold, use and disclose personal information when exercising an identity protection function.

(2) A partner authority may collect, hold, use or disclose personal information to coordinate with the Secretary in response to a personal data compromise.

(3) A public sector agency may collect, hold, use or disclose personal information—

(a) for the purpose of the public sector agency requesting the Secretary to exercise an identity protection function, or

(b) for the purpose of the Secretary exercising an identity protection function, or

(c) for another reason in connection with the Secretary exercising an identity protection function.

(4) Without limiting subsections (1)–(3), a person may disclose personal information to the Secretary for the purpose of the Secretary exercising an identity protection function.