An authorisation under this Act to an entity (the first entity ) is also an authorisation of:
(a) an individual:
(i) who is an employee of the first entity; and
(ii) whose duties involve doing an act that is authorised in relation to the first entity; or
(b) a contracted service provider of a healthcare provider whose duties under a contract with a healthcare provider involve providing information technology services relating to the communication of health information, or health information management services, to the healthcare provider; or
(c) a person (the contractor ) performing services under a contract between the contractor and the first entity, if:
(i) the first entity is a participant in the My Health Record system, other than a registered healthcare provider organisation or a registered contracted service provider; and
(ii) the contract relates to the My Health Record system; or
(d) an individual:
(i) who is an employee of a contracted service provider to which paragraph (b) applies or a contractor to which paragraph (c) applies; and
(ii) whose duties relate to the contract mentioned in whichever of those paragraphs applies.