24.1
24.2
24.3

24.1

The Participant must, in conducting the Project:
  1. not do any act or engage in any practice which if done or engaged in by the Commonwealth, would be a breach of an Information Privacy Principle
  2. not use or disclose Personal Information collected for direct marketing purposes that would be a breach of section 16F of the Privacy Act 1988 (Cth)
  3. comply with any directions, guidelines, determinations or recommendations of the Commonwealth to the extent that they are consistent with the Information Privacy Principles and
  4. comply with the obligations in the National Privacy Principles 7 to 10 (to the extent they apply to the Participant).

24.2

The Participant must notify the Commonwealth immediately if it becomes aware of a breach or possible breach of any of its obligations under this clause.

24.3

If the Participant provides a health, or health-related, service to an individual, the Participant must:
  1. comply with the National Privacy Principles in relation to the use and disclosure of health, health-related information or other 'sensitive information' (as defined in the Privacy Act 1988 (Cth)) about the individual

  2. transfer health or health-related information to another health or health-related service provider when the Commonwealth directs the participant to do so and

  3. inform the individual:
    1. in the form required by the Privacy Act 1988 (Cth) and
    2. at the time the information is collected
that the information may be disclosed to a new health or health-related service provider if required by the Commonwealth.