Health Records and Information Privacy Act 2002 No 71
11 How this Act applies to organisations
(1) This Act applies to every organisation that is a health service provider or that collects, holds or uses health information.
Note. The term organisation means a public sector agency or a private sector person.
(2) An organisation to whom or to which this Act applies is required to comply with the Health Privacy Principles and with any health privacy code of practice or provision of Part 4 that is applicable to the organisation.
(3) An organisation must not do any thing, or engage in any practice, that contravenes a Health Privacy Principle or a health privacy code of practice or a provision of Part 4 in respect of which the organisation is required to comply.
Note. The application of Health Privacy Principles and the provisions of Part 4 may be modified by health privacy codes of practice. See section 39.