Queensland Consolidated Acts Queensland Consolidated Acts(1) The service provider for a residential service must ensure that the service's records, so far as they contain personal information about a resident, are kept in a way that ensures no-one has access to them other than an authorised person for the service or the resident.
Maximum penalty—20 penalty units.
(2) A person who, as an authorised person for a residential service, obtains personal information about a resident from the service's records must not disclose the information to anyone other than another authorised person for the service or the resident.
Maximum penalty—20 penalty units.
(3) Subsections (1) and (2) do not apply to the giving of access to a record, or the disclosure of information, about a resident—
(a) for a purpose of this Act; or
(b) with the resident's consent; or
(c) in compliance with lawful process requiring production of documents or giving of evidence before a court or tribunal; or
(d) as expressly permitted or required by another Act.
(4) In this section—
authorised person, for a residential service, means the service provider or a person employed in the service by the service provider.
personal information, about a resident, means—
(a) information about the resident's health; or
(b) information about the resident's financial affairs; or
(c) other information, relating to the resident, provided for under a regulation.
records, of a residential service, means the records kept by the service provider that relate to the conduct of the service including, for a registered service, the records kept under section 77.