41  Authorised use and disclosure—performing functions etc.

•   An entity may make a record of, use or disclose protected information if the entity makes the record, or uses or discloses the information, for the purposes of:

  • (a)

    exercising the entity’s powers, or performing the entity’s functions or duties, under this Act; or

  • (b)

    otherwise ensuring compliance with a provision of this Act.

  Note: This section is an authorisation for the purposes of other laws, including the Australian Privacy Principles.