(1) The Migration Agents Registration Authority may disclose personal information about a registered migration agent, or an inactive migration agent, to any of the following (the recipient ):
(a) the Secretary or an authorised officer;
(b) a review authority.
(2) However, the Authority may do so only in the prescribed circumstances.
(3) The regulations may prescribe circumstances in which the recipient may use or disclose personal information disclosed under subsection (1).