Hospital and Health Boards Regulation 2023

A committee’s privacy policy must state the ways the committee, or a member of the committee, may do any of the following—

acquire and compile relevant information;

securely store relevant information;

disclose relevant information;

ask an individual for consent to disclose the individual’s identity under section 83(2) of the Act.

The privacy policy also must state the circumstances under which a record containing relevant information may be copied or destroyed.

Nothing in this section affects the operation of the Information Privacy Act 2009 or the Privacy Act 1988 (Cwlth).

In this section—

relevant information means information acquired or compiled by the committee in the performance of its functions.