(1) The Secretary or Australian Border Force Commissioner may, in writing, authorise a specified person, or any person included in a specified class of persons, to access identifying information of the kind specified in the authorisation.
(2) The Secretary or Australian Border Force Commissioner must specify in an authorisation under this section, as the purpose or purposes for which access is authorised, one or more of the following purposes:
(a) one or more of the purposes set out in subsection 5A(3);
(b) disclosing identifying information in accordance with this Part;
(c) administering or managing the storage of identifying information;
(d) making identifying information available to the person to whom it relates;
(e) modifying identifying information to enable it to be matched with other identifying information;
(f) modifying identifying information in order to correct errors or ensure compliance with appropriate standards;
(g) the purposes of:
(i) this Act or an instrument made under this Act; or
(ii) the Australian Citizenship Act 2007 or an instrument made under that Act; or
(iii) the Customs Act 1901 or an instrument made under that Act; or
(iv) any other law of the Commonwealth prescribed by the regulations;
(h) complying with laws of the Commonwealth or the States or Territories.
(3) However, the Secretary or Australian Border Force Commissioner must not specify as a purpose for which access is authorised a purpose that will include or involve the purpose of:
(a) investigating an offence against a law of the Commonwealth or a State or Territory; or
(b) prosecuting a person for such an offence;
if the identifying information in question relates to a personal identifier of a prescribed type.