65Collection, use and disclosure authorised by law

65 Collection, use and disclosure authorised by law

(1) Subject to section 69, a participant in the My Health Record system is authorised to collect, use and disclose health information included in a healthcare recipient’s My Health Record if the collection, use or disclosure is required or authorised by a Commonwealth, State or Territory law covered by subsection (3).

Note: No State or Territory laws are covered by subsection (3).

(2) Subsection (1) does not authorise a participant in the My Health Record system to collect, use or disclose healthcare recipient‑only notes. (3) This subsection covers the following laws: (a) this Act; (b) the Auditor‑General Act 1997; (c) the Ombudsman Act 1976; (d) a law of the Commonwealth to the extent that the law requires or authorises the collection, use or disclosure of information for the purposes of performing the Information Commissioner’s functions in relation to the My Health Record system.