Privacy and Responsible Information Sharing (Information Sharing) Regulations 2025

If information is disclosed by a provider to a recipient under an information sharing agreement, the recipient must ensure that the information is designated as having been disclosed under the information sharing agreement.

Subregulation (3) applies if, in accordance with section 172 of the Act, an information sharing agreement provides for a recipient to be permitted to further disclose information it collects under the agreement to another person (the third party) who is not a party to the agreement.

The recipient must, before further disclosing the information, enter into a contract, agreement or other arrangement with the third party under which the third party agrees to collect, hold, manage and use the information in compliance with the applicable provisions of the information sharing agreement.