Do I need permission from an individual to disclose their personal information?

You should only disclose personal information if you can rely on one of the exceptions to principle 11, or if there is another law which permits or requires disclosure. One of those exceptions is where an individual authorises you to disclose the information.

Authorisation (or consent) is not always required, though it is often best practice to get consent so that individuals aren’t taken by surprise. As long as you can rely on another exception, you aren’t required to go and get permission too. For example, the main reason for using and disclosing personal information is that using or disclosing it in that way was the purpose for which you got it, and you told the individual that at the time you collected the information.