An organisation must not give an individual access under this Act to his or her health information, or part of his or her health information, if the organisation believes on reasonable grounds, having regard to the guidelines, if any, issued or approved by the Health Complaints Commissioner under section 22 for the purposes of HPP 6.1(a), that the provision of the health information, or that part of the health information, would pose a serious threat to the life or health of the individual or any other person.