An organisation must not use or disclose a unique identifier assigned to an individual by another organisation unless—
7.3 An organisation must not use or disclose a unique identifier assigned to an individual by another organisation unless—
the use or disclosure is necessary for the organisation to fulfil its obligations to the other organisation; or
one or more of IPP 2.1(d) to (g) applies to the use or disclosure; or
it has obtained the consent of the individual to the use or disclosure.
7.4 An organisation must not require an individual to provide a unique identifier in order to obtain a service unless the provision of the unique identifier is required or authorised by law or the provision is in connection with the purpose (or a directly related purpose) for which the unique identifier was assigned.
This Act’s bill:Explanatory memorandumSecond reading speech
The statute text is free to read above. View subscription options to unlock the case-law research tools for each provision.