The approved provider of an education and care service must ensure that information kept in a record under these Regulations is not divulged or communicated, directly or indirectly, to another person other than--
(a) to the extent necessary for the education and care or medical treatment of the child to whom the information relates; or
(b) a parent of the child to whom the information relates, except in the case of information kept in a staff record; or
(c) the Regulatory Authority or an authorised officer; or
(d) as expressly authorised, permitted or required to be given by or under any Act or law; or
(e) with the written consent of the person who provided the information.
Penalty: $2000.