What it means to disclose personal information and to use personal information

In force

(1)

An entity (the first entity) discloses personal information to another entity (the second entity) if—

(a)

the second entity does not know the personal information, and is not in a position to be able to find it out; and

(b)

the first entity gives the second entity the personal information, or places it in a position to be able to find it out; and

(c)

the first entity ceases to have control over the second entity in relation to who will know the personal information in the future.

(2)

An entity uses personal information if it—

(a)

manipulates, searches or otherwise deals with the information; or

(b)

takes the information into account in the making of a decision; or

(c)

transfers the information from a

part of the entity having particular functions to a

part of the entity having different functions.

(3)

Subsection (2) does not limit what actions may be use of the personal information.

(4)

However, use of the personal information does not include the action of disclosing the personal information to another entity.

Research tools for this sectionSubscription

The statute text is free to read above. View subscription options to unlock the case-law research tools for each provision.