602.Subsection (1) provides that disclosure will be permitted where the authority wishing to disclose the information obtains the necessary consent(s) that are detailed in the following subsections.
603.Subsection (2) requires the consent to disclosure by the provider of the information, but applies only where the authority knows the identity of the person from whom it obtained the information. This recognises the possibility that it may not always be possible to identify the provider of particular pieces of information. Where the identity of the provider is known, the authority must satisfy itself that the provider was legally in possession of the information and that the provider consents to further disclosure before releasing the information.
604.Subsections (3), (4) and (5) require the consent by the subject of the information. Where the information concerns the affairs of an individual, that individual must consent to further disclosure by the authority. Where the information relates to the business of an undertaking, subsection (5) requires consent to be given by a senior representative of the undertaking: for example, the company secretary or other director; a partner; or, in the case of an unincorporated body, a person in a position of management or control.