If an entity (the sharer ) is sharing data with another entity (the user ) under, or purportedly under, section 13 through another entity (the intermediary ) as part of a project, the intermediary is authorised to collect data shared with it by the sharer, or to use ADSP - enhanced data of the project, if all of the following apply:
(b) the collection or use is in accordance with the data sharing agreement;
(c) the intermediary is satisfied that the project is consistent with the data sharing principles;
(d) the intermediary is an ADSP and its accreditation is not suspended;
(e) if the data shared with the intermediary includes personal information--the privacy coverage condition in section 16E is met in relation to the intermediary;
(f) if the sharing by the sharer is not authorised by section 13--the intermediary does not know and could not reasonably be expected to know that.