(1) A person may:
(a) obtain protected information; or
(b) make a record of protected information; or
(c) disclose protected information to another person; or
(d) use protected information;
if:
(e) the obtaining, recording, disclosure or use of the information by the person is done:
(i) for the purposes of the scheme; or
(ii) with the express or implied consent of the person or institution to which the information relates; or
(f) the person believes on reasonable grounds that the obtaining, recording, disclosure or use of the information by the person is necessary to prevent or lessen a serious threat to an individual's life, health or safety.
(2) A person may use protected information to produce information in an aggregated form that does not disclose, either directly or indirectly, information about a particular person or institution.