31 Health agencies to comply with NPPs

(1) Health agencies must comply with the NPPs.

(2) Without limiting subsection (1), health agencies—
(a) must not do an act, or engage in a practice, that contravenes, or is otherwise inconsistent with a requirement of, an NPP; and
(b) must not fail to do an act, or fail to engage in a practice, if the failure contravenes, or is otherwise inconsistent with a requirement of, an NPP.

(3) An act or practice mentioned in subsection (2) includes any act or practice relating to a health agency's collection, storage, handling, accessing, amendment, management, transfer, use or disclosure of personal information