The rules may authorise a person who obtains protected information to use or disclose the information for purposes other than those referred to in sections 24 to 29.
Note: A disclosure that is authorised by rules made for the purposes of this section is an authorised disclosure for the purposes of the Privacy Act 1988 and other laws (including the common law).