41 Authorised use and disclosure—performing functions etc.
An entity may make a record of, use or disclose protected information if the entity makes the record, or uses or discloses the information, for the purposes of:
(a)
exercising the entity’s powers, or performing the entity’s functions or duties, under this Act; or
(b)
otherwise ensuring compliance with a provision of this Act.
Note: This section is an authorisation for the purposes of other laws, including the Australian Privacy Principles.