(1) A person must not use health information included in a healthcare recipient's My Health Record for a prohibited purpose, if the person obtained the information by using or gaining access to the My Health Record system.
Note: For prohibited purpose , see section 70A.
Civil penalty: 1,500 penalty units.
(2) Subsection (1) does not apply if the person is the healthcare recipient, but does apply if the person is the nominated representative of the healthcare recipient (despite subsection 7(2)).