(1) An entrusted person may disclose protected information to the person to whom the information relates.
(2) An entrusted person may use or disclose protected information for a purpose if the person to whom the information relates has expressly consented to the entrusted person using or disclosing the information for that purpose.