An entity may make a record of, use or disclose protected information if:
(a) the entity obtains the information under this Subdivision (including this section); and
(b) the entity makes the record, or uses or discloses the information, for the purposes for which the information was disclosed to the entity.
Note: This section is an authorisation for the purposes of other laws, including the Australian Privacy Principles.