The plaintiff says that the ACC's request for information amounted to an infringement of Rule 1 of the Health Information Privacy Code 1994 ('the Code'), the effect of which is that the ACC is not allowed to collect health information unless it is required for some lawful purpose connected with the ACC's functions (and the information is necessary for that purpose).