Consent of person to whom protected information relates
(1) An entrusted person may make a record of, disclose or access protected information that relates to the affairs of a person if:
(a) the person has expressly consented to the recording, disclosure or access; and
(b) the recording, disclosure or access is in accordance with that consent.
Consent of jurisdiction responsible for NDLFRS protected information
(2) An entrusted person may make a record of, disclose or access protected information that was:
(a) held in, or generated using, NDLFRS; and
(b) supplied by an authority of a State or Territory;
if the authority expressly consents to the recording, disclosure or access.
Note: The NDLFRS hosting agreement also contains privacy requirements that relate to the authority (see subsection 13(2)).