The head of an entity may share information about non-compliance concerns, reportable allegations, convictions, investigations, findings and action with the Regulator, entity regulators, other heads, police, independent investigators, the Registrar and others listed, and with workers where necessary, but only for the purposes of the Act, the promotion of children's safety and wellbeing, or a prescribed purpose (s 40); it may tell the worker concerned about the investigation (s 41) and tell the child, guardians, carers and the person who reported about progress, findings and action, but never a guardian or carer who is the subject (s 42). The Regulator protects the identity of the child as far as practicable (s 38).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.