5 NPP5 - Openness

(1) A health agency must set out in a document clearly expressed policies on its management of personal information and must make the document available to anyone who asks for it.

(2) On request by a person, a health agency must take reasonable steps to let the person know, generally, what sort of personal information it holds, for what purposes, and how it collects, holds, uses and discloses that information.