New section 36 (2A)
insert
(2A) A regulation may make provision about a matter by applying, adopting or incorporating an instrument, or a provision of an instrument, as in force from time to time for the privacy principles, principle 10, clause 3 (which is about the disclosure of a health record for the purpose of research or the compilation or analysis of statistics).