Health Records and Information Privacy Act 2002 No 71
11 How this Act applies to organisations
(1) This Act applies to every organisation that is a health service
provider or that collects, holds or uses health information.
Note. The term organisation means a
public sector agency or a private sector person.
(2) An organisation to whom or to which this Act applies is required
to comply with the Health Privacy Principles and with any health privacy code
of practice or provision of Part 4 that is applicable to the
(3) An organisation must not do any thing, or engage in any practice,
that contravenes a Health Privacy Principle or a health privacy code of
practice or a provision of Part 4 in respect of which the organisation is
required to comply.
Note. The application of Health Privacy Principles and the provisions of
Part 4 may be modified by health privacy codes of practice. See section