An accreditation authority is authorised to disclose to the Secretary any information (including personal information within the meaning of the Personal Information Protection Act 2004 ) obtained by the accreditation authority in the performance of functions under this Act.