Privacy Code of Practice (General) 2003
Current version for 24 September 2018 to date (accessed 5 July 2020 at 05:23)
Part 5 Clause 16
16   Disclosure of personal information
The Department is not required to comply with section 18 or 19 (1) of the Act if non-compliance is reasonably necessary to enable the Department to do one or more of the following:
(a)  to protect the safety, welfare or well-being of a person,
(b)  to provide services and programs to an offender effectively,
(c)  to permit one or more of the following to exercise its functions properly in relation to an offender:
(i)  the Department of Family and Community Services,
(ii)  the Ministry of Health,
(iii)  the Justice Health and Forensic Mental Health Network,
 This does not permit the Department to disclose health information as health information is regulated by the Health Records and Information Privacy Act 2002.
(d)  to disclose personal information to a person for the purposes of an investigation, but only if the disclosure is made to a person:
(i)  to verify the information, or
(ii)  to obtain professional or technical advice about the information.