28Authorisation to disclose protected information to person to whom information relates, or to use or disclose protected information with consent

28 Authorisation to disclose protected information to person to whom information relates, or to use or disclose protected information with consent

(1) A person who obtains protected information may disclose the information to the person to whom the information relates.

Note: This subsection constitutes an authorisation for the purposes of the Privacy Act 1988 and other laws (including the common law).

(2) A person (the first person) who obtains protected information may use or disclose the information for a purpose if the person to whom the information relates has expressly consented to the first person using or disclosing the information for that purpose.

Note: This subsection constitutes an authorisation for the purposes of the Privacy Act 1988 and other laws (including the common law).