(1) A participant in the My Health Record system is authorised to disclose for any purpose health information included in a healthcare recipient's My Health Record to the healthcare recipient.
(2) A participant in the My Health Record system is authorised to collect, use and disclose for any purpose health information included in a healthcare recipient's My Health Record with the consent of the healthcare recipient.