Information Act 2002

(1) A public sector organisation is authorised to collect, use or disclose personal information in a manner that would otherwise contravene or be inconsistent with the IPPs:

(b) if the information is to be collected, used or disclosed for a permitted purpose in relation to the emergency situation or public health emergency.

(2) On the application of a public sector organisation, the Commissioner may authorise in writing the organisation to collect, use or disclose personal information in a manner that would otherwise contravene or be inconsistent with the IPPs:

(a) for a period of time after the end of an emergency situation or a public health emergency; and

(b) if the information is to be collected, used or disclosed for a permitted purpose in relation to the emergency situation or public health emergency.

permitted purpose, in relation to an emergency situation or a public health emergency, means a purpose that directly relates to the Territory's response to, management of or recovery from the emergency situation or public health emergency and may include the purpose of:

(a) coordinating operations for the response, management or recovery; and

(i) are or may be injured, missing or dead as a result of the emergency situation or public health emergency; or

(ii) are or may be otherwise involved in the emergency situation or public health emergency; and

(c) assisting individuals involved in the emergency situation or public health emergency in obtaining services such as repatriation services, medical or other treatment, health services, financial and other humanitarian assistance; and

(d) assisting with law enforcement in relation to the emergency situation or public health emergency.