21Authorised dealings with information—general

21 Authorised dealings with information—general

Including information etc. in the National Registry (1) A person may collect, make a record of, disclose or otherwise use: (a) personal information; or (b) workplace identifying information; or (c) information that is commercial‑in‑confidence; if the person does so for the purposes of including information in the National Registry.

Note 1: This subsection is an authorisation for the purposes of other laws, including the Australian Privacy Principles.

Note 2: Certain information in relation to an individual may be collected and recorded in the National Registry under Part 2 only with the individual’s consent.

Authorised collection, disclosure or other use of information in the National Registry (2) A person may collect, make a record of, disclose or otherwise use protected information included in the National Registry, if: (a) the person does so for the purposes of the National Registry and is: (i) an officer or employee of the Commonwealth or a Commonwealth authority; or (ii) engaged by the Commonwealth, or a Commonwealth authority, to perform work relating to the purposes of the National Registry; or (iii) an officer or employee of a person referred to in subparagraph (ii), or engaged by a person referred to in subparagraph (ii) to perform work relating to the purposes of the National Registry; or (b) all of the following apply: (i) the person is a prescribed medical practitioner; (ii) the information is about a diagnosis, or the progression, of an occupational respiratory disease in relation to an individual; (iii) the collection, recording, disclosure or use is for the purposes of providing healthcare to the individual in relation to the occupational respiratory disease; or (c) all of the following apply: (i) the person is a prescribed medical practitioner; (ii) the person has diagnosed an individual with an occupational respiratory disease, or is treating an individual for an occupational respiratory disease; (iii) the collection, recording, disclosure or use is for the purpose of checking whether information in relation to the individual is included in the National Registry; or (d) the person does so for the purposes of performing the person’s functions or duties, or exercising the person’s powers, under this Act; or (e) the person is required or authorised to do so by or under a law of the Commonwealth, or of a State or Territory; or (f) all of the following apply: (i) the person is the Director‑General of the CDC; (ii) the collection, recording, disclosure or use is for the purposes of disclosing information to an enforcement body; (iii) the person reasonably believes that the information is reasonably necessary for, or directly related to, one or more enforcement related activities being conducted by, or on behalf of, the enforcement body; or (g) the information is disclosed to the person under this section, and the collection, recording, disclosure or use is for the purpose for which the information was disclosed to the person; or (h) the person does so for the purposes of court or tribunal proceedings, or in accordance with an order of a court or tribunal; or (i) the person does so for the purposes of a coronial inquiry, or in accordance with an order of a coroner.