81. Obligations of relevant HDI of public agency

Where a relevant HDI —

processes health information on behalf of and for the purposes of a contributor or user that is a public agency; and

has reason to believe that a data breach has occurred in relation to that health information,the relevant HDI must, without undue delay, notify the public agency of the occurrence of the data breach.