Commonwealth Consolidated Regulations Commonwealth Consolidated Regulations(1) An authorised research entity must not disclose research information relating to a contacted person unless authorised, or required to do so, by or under:
(a) subsection (2) or (3); or
(b) any other law that applies to the entity.
Note: See section 41 in relation to the recording, use or disclosure of research information after the authorisation ends or the entity is removed from the authorisation.
(2) The entity may disclose research information relating to a contacted person to the entity's research employees.
(3) The entity may disclose research information relating to a contacted person if:
(a) the information is de - identified; and
(b) the information does not include the person's public number.
(4) This section is subject to subsection 30(3).
Note: Subsection 30(3) provides that an authorised research entity must not record, use or disclose research information relating to a contacted person if the person does not consent, or withdraws consent, to the use and disclosure of that information.