A health care provider may examine a user’s health records for the purposes of-
(a) treatment with the authorisation of the user; and
(b) study, teaching or research with the authorisation of the user, head of the health establishment concerned and the relevant health research ethics committee.
