Competition and Consumer Act 2010

The SPF general regulator may disclose information relating to either of the following actions (a scamming action):

a scam (as defined in section 58AG);

a scam (within the ordinary meaning of that expression);

This includes disclosing SPF personal information, but such information may first need to be de‑identified (see subsection (4)).

The SPF general regulator can also disclose the information to an SPF sector regulator (see section 58EG).

The entities are as follows:

a regulated entity;

a Commonwealth agency or authority involved in developing Government policy relating to this Part;

a law enforcement agency of the Commonwealth, or of a State or Territory;

an agency of a foreign country, or of part of a foreign country, that:

is a law enforcement agency; or

is a regulatory agency responsible for scam prevention;

This subsection applies to a disclosure of information to a foreign agency if the SPF general regulator is satisfied that:

the agency has given an undertaking for the following:

controlling the storage and handling of the information;

controlling the use that will be made of the information;

ensuring that the information will be used only for the purpose for which it is disclosed to the agency; and

it is appropriate, in all the circumstances, to disclose the information to the agency.

SPF personal information may be disclosed under subsection (1). However, for a disclosure to an entity mentioned in paragraph (2)(b) such information must be de‑identified unless the SPF general regulator reasonably believes that doing so would not achieve the object of this Part.