Despite anything in the Privacy Act 2020, personal information about an identifiable individual that is provided or obtained for the purpose of contact tracing under this Act (such as through QR scans or paper-based forms) may not be collected, used, or disclosed by anyone except for the purpose of contact tracing under this Act or for the purposes of the Health Act 1956.