To what extent do organisations need to be aware of records legislation and other provisions concerning privacy, use, disclosure and access in other jurisdictions, such as the ACT and NSW?
Under Health Privacy Principle (HPP) 9, Transborder data flows, an organisation must reasonably believe that the recipient of the health information is subject to a law, binding scheme or contract that effectively upholds principles for fair handling of the information that are substantially similar to the HPPs. Alternatively consent from the individual to transfer the information is required.
Related Questions
- To what extent do organisations need to be aware of records legislation and other provisions concerning privacy, use, disclosure and access in other jurisdictions, such as the ACT and NSW?
- How does the Health Records Act interact with other existing Commonwealth and State legislation concerning privacy, confidentiality, secrecy, access and disclosure?
- What does it mean to make a routine use disclosure from a Privacy Act System of Records?
