Skip to content
DraftAs enacted

Part 3 · Sharing of Relevant Information for Specified Use Cases

57. Subsequent disclosure of relevant information by recipient

Feedback & support
(1)

A recipient (B) who collects, in relation to a use case, relevant information about any individual that is disclosed by a discloser (A) pursuant to a data sharing agreement between A and B must not disclose that relevant information to any other person unless —

(a)

the disclosure of the relevant information is required or permitted by or under this Act or any other written law, or by an order of court; or

(b)

the relevant information is disclosed to any person and in any circumstances that may be prescribed.

(2)

For the purposes of subsection (1)(a), the disclosure of relevant information about an individual is not considered to be required or permitted under any written law merely because the individual has consented or has given his or her consent in accordance with Part 4 of the Personal Data Protection Act 2012, or such consent is not required under that Part.

(3)

To avoid doubt, subsection (1) does not affect the processing of relevant information mentioned in that subsection by a health data intermediary of B or any personnel of a health data intermediary of B in accordance with section 56(3).

Report

Part 4

Security of Health Information and Relevant Information

Part 5

Notification of Cybersecurity Incidents and Data Breaches

Part 6

Responses to Threats and Incidents Affecting Health Information and Relevant Information

Part 7

Portability of Health Information in Electronic Form

Part 8

Administration and Enforcement

Part 9

Miscellaneous

Schedules