Security of Critical Infrastructure Act 2018

42AA Authorised use and disclosure—availability, integrity, reliability or security of a critical infrastructure asset

A relevant entity (other than the Commonwealth) for a critical infrastructure asset may make a record of, use or disclose protected information if the entity makes the record, or uses or discloses the information:

(a)

for a purpose relating to the continued operation of the critical infrastructure asset; or

(b)

to mitigate a risk to the availability, integrity, reliability or security of the critical infrastructure asset.

Note: This section is an authorisation for the purposes of other laws, including the Australian Privacy Principles.