Health Records and Information Privacy Act 2002 No 71
Current version for 1 March 2020 to date (accessed 5 July 2020 at 21:41)
Part 4 Division 1
Division 1 General
23   When non-compliance authorised
A private sector person is not required to comply with a requirement of this Part applying to the person if—
(a)  the private sector person is lawfully authorised or required not to comply with it, or
(b)  non-compliance is otherwise permitted (or is necessarily implied or reasonably contemplated) under an Act or any other law.
24   Guidelines by Privacy Commissioner
The Privacy Commissioner may issue guidelines with respect to access to, and retention and amendment of, health information held by private sector persons for the purpose of assisting them to comply with the Health Privacy Principles and this Part.