(1) Despite Subdivisions A and B, a person is not authorised under this Division to use health information included in a registered healthcare recipient's My Health Record for a prohibited purpose.
(2) Subsection (1) does not apply if the person is the healthcare recipient, but does apply if the person is the nominated representative of the healthcare recipient (despite subsection 7(2)).