Summary of IPP 11
IPP 11.1 states that an Agency must not disclose personal information unless:
(a) the person the information is about has been told in a valid IPP 2 notice, or is otherwise likely to know, that the kind of disclosure is commonly made; or
(b) the person the information is about has consented; or
(c) the disclosure is necessary to protect against a serious and imminent threat to a person's life or health; or
(d) the disclosure is required or authorised by law; or
(e) the disclosure is reasonably necessary to enforce the criminal law or a law imposing a pecuniary penalty, or to protect public revenue.
IPP 11.2 states that an agency that discloses personal information under exception 11.1(e) must note that disclosure on the record containing the information. In most cases this will be the file.
IPP 11.3 states that, if an agency discloses any personal information, the recipient must only use or disclose it for the purposes for which it was disclosed to them.
What is a disclosure ?
The Privacy Commissioner interprets a disclosure as a release of personal information from the effective control of the agency.