Obtaining protected information
(1) A person may obtain protected information if the information is obtained for the purposes of this Act, or the Regulatory Powers Act as that Act applies in relation to this Act.
Using protected information
(2) A person may:
(a) make a record of protected information; or
(b) disclose such information to any person; or
(c) otherwise use such information;
if the record, disclosure or use of the information by the person is made:
(d) for the purposes of this Act, or the Regulatory Powers Act as that Act applies in relation to this Act; or
(da) for the purposes of the family assistance law; or
(db) for the purposes of the social security law; or
(dc) for the purposes of the Student Assistance Act 1973 ; or
(e) for the purposes for which the information was disclosed to the person under section 128; or
(f) with the express or implied authorisation of the person to whom the information relates.
(3) A person may use protected information to produce information in an aggregated form that does not disclose, either directly or indirectly, information about a particular person.