Skip to content
DraftAs enacted
Contents

Part 2 · National Electronic Records System

42. Offences relating to derived information — other persons

Feedback & support
(1)

A person who —

(a)

is not a requestor; and

(b)

without reasonable excuse, accesses, collects, discloses or uses any information that the person knows or has reason to believe is derived information,shall be guilty of an offence.

(2)

A person who —

(a)

is not a requestor;

(b)

without reasonable excuse, does any act or takes any step to identify or cause the identification of any individual from aggregated or anonymised health information; and

(c)

knows or has reason to believe that the aggregated or anonymised health information mentioned in paragraph (b) is type 2 derived information within the meaning given by section 24,shall be guilty of an offence.

(3)

A person convicted of an offence under subsection (1) or (2) shall be liable on conviction to a fine not exceeding $100,000 or to imprisonment for a term not exceeding 4 years or to both.

Report

Part 3

Sharing of Relevant Information for Specified Use Cases

Part 4

Security of Health Information and Relevant Information

Part 5

Notification of Cybersecurity Incidents and Data Breaches

Part 6

Responses to Threats and Incidents Affecting Health Information and Relevant Information

Part 7

Portability of Health Information in Electronic Form

Part 8

Administration and Enforcement

Part 9

Miscellaneous

Schedules