A disclosure of personal information (within the meaning of the Privacy Act 1988 ) is taken to be authorised by law for the purposes of paragraph 6.2(b) of Schedule 1 to that Act if:
(a) the information is protected information; and
(b) the disclosure is authorised by subsection 212M(3) of this Act.