• An entrusted person must not make a record of or disclose protected information unless the making of the record or disclosure is authorised by a provision of this Part, is in the course of the person's employment or service as an entrusted person or is required or authorised by law or by an order or direction of a court or tribunal.