sec.23What it means to disclose personal information and to use personal information

### sec.23 What it means to disclose personal information and to use personal information An entity (the first entity ) discloses personal information to another entity (the second entity ) if— the second entity does not know the personal information, and is not in a position to be able to find it out; and the first entity gives the second entity the personal information, or places it in a position to be able to find it out; and the first entity ceases to have control over the second entity in relation to who will know the personal information in the future. An entity uses personal information if it— manipulates, searches or otherwise deals with the information; or takes the information into account in the making of a decision; or transfers the information from a part of the entity having particular functions to a part of the entity having different functions. Subsection (2) does not limit what actions may be use of the personal information. However, use of the personal information does not include the action of disclosing the personal information to another entity. s 23 amd 2023 No. 32 s 20 (sec.23-ssec.1) An entity (the first entity ) discloses personal information to another entity (the second entity ) if— the second entity does not know the personal information, and is not in a position to be able to find it out; and the first entity gives the second entity the personal information, or places it in a position to be able to find it out; and the first entity ceases to have control over the second entity in relation to who will know the personal information in the future. (sec.23-ssec.2) An entity uses personal information if it— manipulates, searches or otherwise deals with the information; or takes the information into account in the making of a decision; or transfers the information from a part of the entity having particular functions to a part of the entity having different functions. (sec.23-ssec.3) Subsection (2) does not limit what actions may be use of the personal information. (sec.23-ssec.4) However, use of the personal information does not include the action of disclosing the personal information to another entity. - (a) the second entity does not know the personal information, and is not in a position to be able to find it out; and - (b) the first entity gives the second entity the personal information, or places it in a position to be able to find it out; and - (c) the first entity ceases to have control over the second entity in relation to who will know the personal information in the future. - (a) manipulates, searches or otherwise deals with the information; or - (b) takes the information into account in the making of a decision; or - (c) transfers the information from a part of the entity having particular functions to a part of the entity having different functions.