(1) A person exercising functions under this Law may disclose protected information to the following entities--(a) the Chief Executive Medicare under the Human Services (Medicare) Act 1973 of the Commonwealth;(b) an entity performing functions under the Health Insurance Act 1973 of the Commonwealth;(c) the Secretary within the meaning of the National Health Act 1953 of the Commonwealth;(d) the Secretary to the Department in which the Migration Act 1958 of the Commonwealth is administered;(e) another Commonwealth, State or Territory entity having functions relating to professional services provided by health practitioners or the regulation of health practitioners.
(2) However, a person may disclose protected information under subsection (1) only if the person is satisfied--(a) the protected information will be collected, stored and used by the entity to which it is disclosed in a way that ensures the privacy of the persons to whom it relates is protected; and(b) the provision of the protected information to the entity is necessary to enable the entity to exercise its functions.