Commonwealth Consolidated Acts Commonwealth Consolidated ActsAn authorisation under this Act to an entity to disclose information to a healthcare provider for a particular purpose is an authorisation to disclose the information to:
(a) an individual:
(i) who is an employee of the healthcare provider; and
(ii) whose duties involve, or are reasonably connected to, implementing that purpose; or
(b) a contracted service provider of the healthcare provider, if the duties of the contracted service provider under a contract with the healthcare provider involve, or are reasonably connected with, implementing that purpose by providing information technology services relating to the communication of health information, or health information management services, to the healthcare provider; or
(c) an individual:
(i) who is an employee of a contracted service provider to which paragraph (b) applies; and
(ii) whose duties involve implementing that purpose as mentioned in that paragraph.