Adoption Act 2000

The Secretary may enter into arrangements with a research organisation for the purposes of permitting the disclosure to the research organisation of information (including health information and personal information) that is held by the Department or an accredited adoption service provider about any of the following persons (an affected person)—

a person involved in an adoption or prospective adoption as a birth parent, adoptive parent or child,

a person involved in out-of-home care as an authorised carer or child.

The Secretary is not to enter into arrangements under this section unless satisfied that those arrangements will ensure that—

reasonable steps will be taken to de-identify information disclosed under the arrangements, and

information disclosed under the arrangements will be treated by the research organisation as confidential, and

as far as is reasonably practicable, no publication that uses or is based on information disclosed under the arrangements will enable the identity of an affected person to be ascertained, and

as far as is reasonably practicable, any personal information disclosed under the arrangements will be used or dealt with in accordance with the information protection principles set out in sections 12, 17, 18 and 19 of the Privacy and Personal Information Protection Act 1998 as those principles would apply if the research organisation were a public sector agency.

Note.

The Privacy and Personal Information Protection Act 1998 requires public sector agencies to deal with personal information in accordance with the information protection principles set out in that Act.

Before entering into arrangements for the disclosure of information under this section, the Secretary must consult with the Privacy Commissioner in relation to those arrangements.

A disclosure of information made in good faith under the arrangements does not constitute a contravention of any provision as to confidentiality in this Act and does not constitute a contravention of the Health Records and Information Privacy Act 2002 or the Privacy and Personal Information Protection Act 1998.

The provisions of the Health Records and Information Privacy Act 2002 apply to health information disclosed under the arrangements as if the research organisation were a private sector person (within the meaning of that Act).

Note.

The Health Records and Information Privacy Act 2002 requires a private sector person that collects, holds or uses health information to comply with the health privacy principles provided for by that Act.

In this section—

health information has the same meaning as in the Health Records and Information Privacy Act 2002.

personal information has the same meaning as in the Privacy and Personal Information Protection Act 1998.