sec.291Restriction on disclosure of information

### sec.291 Restriction on disclosure of information A person given health information held by a health agency under this part must not disclose the information, whether directly or indirectly. Maximum penalty—50 penalty units. Subsection (1) does not apply if— the disclosure is to a person named in a notice under section 284 (3) or 286 as a person who will be given the information for the research; or the disclosure is made with the written consent of the person to whom the information relates; or the disclosure is made in a form the person reasonably believes could not identify any person; or the disclosure is authorised under an Act or another law. The Hospital and Health Boards Act 2011 , section 142 , does not apply to a person in relation to information given to the person under this part for research. s 291 amd 2011 No. 32 s 332 sch 1 pt 2 (amd 2012 No. 9 s 47 ); 2016 No. 8 s 28 (sec.291-ssec.1) A person given health information held by a health agency under this part must not disclose the information, whether directly or indirectly. Maximum penalty—50 penalty units. (sec.291-ssec.2) Subsection (1) does not apply if— the disclosure is to a person named in a notice under section 284 (3) or 286 as a person who will be given the information for the research; or the disclosure is made with the written consent of the person to whom the information relates; or the disclosure is made in a form the person reasonably believes could not identify any person; or the disclosure is authorised under an Act or another law. (sec.291-ssec.3) The Hospital and Health Boards Act 2011 , section 142 , does not apply to a person in relation to information given to the person under this part for research. - (a) the disclosure is to a person named in a notice under section 284 (3) or 286 as a person who will be given the information for the research; or - (b) the disclosure is made with the written consent of the person to whom the information relates; or - (c) the disclosure is made in a form the person reasonably believes could not identify any person; or - (d) the disclosure is authorised under an Act or another law.