The determinations:
(a) may authorise the use or disclosure, in specific circumstances, of personal information (within the meaning of the Privacy Act 1988 ); and
(b) may impose restrictions on the collection, storage, access, further use or further disclosure of personal information used or disclosed under determinations made for the purposes of paragraph ( a).