Zero and Low Emission Vehicle Distance-Based Charge Act 2021

The Secretary or a relevant person must not disclose relevant information to a person or body under section 66(1)(a)(ii) or (iii) or (e), unless the person or body has first entered into an information protection agreement with the Secretary.

An information protection agreement must—

specify—

the purpose for which the information is proposed to be disclosed to the person or body; and

the provision of this Act under which the Secretary is authorised to disclose the information; and

the means by which the information will be provided by the Secretary; and

the means by which the information will be protected by the person or body; and

how compliance with the terms of the agreement will be monitored and enforced by each party to the agreement; and

the auditing arrangements; and

the procedures for managing any breach of privacy; and

include an undertaking by the person or body that the information will be used or disclosed only for the purpose specified in the agreement.

An information protection agreement may include any other requirements, qualifications or conditions specified by the Secretary.

Subsection (1) does not apply if—

an information protection agreement is currently in force between the Secretary and the delegator, employer, contractor or principal of the person or body who has requested the relevant information; and

in making the request for the relevant information, the person or body is acting within the scope of their actual or apparent authority under the delegation, employment, contractual relationship or agency.

If a person or body requests relevant information other than for a purpose specified in subsection (1), the Secretary or a relevant person may require the person or body to first enter into an information protection agreement with the Secretary.

A person or body is not required to enter into an information protection agreement with the Secretary in relation to the use or disclosure of relevant information if—

the person or body is a relevant person; and

the relevant information is disclosed to the person or body in their capacity as a relevant person.