(1) A person may make a record of, disclose or otherwise use protected information if:
(a) the person makes the record, or discloses or uses the information, in performing the person's functions or duties, or exercising the person's powers, under this Act; and
(b) in relation to a disclosure--the information is disclosed to a person who is:
(i) a Minister, an officer or an employee of the Commonwealth, a State, the Australian Capital Territory or the Northern Territory; or
(ii) an officer or employee of a Commonwealth, State or Territory body; or
(iii) a person appointed by the Commonwealth for the purposes of this Act.
(2) A person may make a record of, disclose or otherwise use protected information if:
(a) the person obtains the information under subsection (1) or this subsection; and
(b) the person makes the record of, discloses or otherwise uses the information for the purposes for which the information was disclosed to the person; and
(c) in relation to a disclosure by the person--the information is disclosed to a person who is:
(i) a Minister, an officer or an employee of the Commonwealth, a State, the Australian Capital Territory or the Northern Territory; or
(ii) an officer or employee of a Commonwealth, State or Territory body; or
(iii) a person appointed by the Commonwealth for the purposes of this Act.