99Authorisations extend to employees etc.

99 Authorisations extend to employees etc.

An authorisation under this Act to an entity (the first entity) is also an authorisation of: (a) an individual: (i) who is an employee of the first entity; and (ii) whose duties involve doing an act that is authorised in relation to the first entity; or (aa) an individual healthcare provider, if: (i) the first entity is a registered healthcare provider organisation; and (ii) the first entity provides services or facilities to the individual healthcare provider, to facilitate the provision of healthcare by the individual healthcare provider; or (b) a contracted service provider of a healthcare provider whose duties under a contract with a healthcare provider involve providing information technology services relating to the communication of health information, or health information management services, to the healthcare provider; or (c) a person (the contractor) performing services under a contract between the contractor and the first entity, if: (i) the first entity is a participant in the My Health Record system, other than a registered healthcare provider organisation or a registered contracted service provider; and (ii) the contract relates to the My Health Record system; or (ca) a person (the subcontractor) performing services under a contract between the subcontractor and another person (the contractor), if: (i) the first entity is the System Operator or the operator of the National Repositories Service; and (ii) the first entity has a contract with the contractor; and (iii) the contract between the subcontractor and the contractor relates to the My Health Record system; or (d) an individual: (i) who is an employee of a contracted service provider to which paragraph (b) applies or a person to whom paragraph (c) or (ca) applies; and (ii) whose duties relate to the relevant contract mentioned in whichever of those paragraphs applies.