(1) The Regulator may disclose protected information acquired by the Regulator in carrying out functions or exercising powers under this Act or any other Act if—
(a) the Regulator is satisfied that the disclosure—
(i) may promote the objectives of this Act; or
(ii) may promote good public administration; or
(iii) is in the interests of justice; or
(b) the Regulator reasonably considers it otherwise appropriate to do so.
(2) A person to whom protected information is disclosed under subsection (1) may only use that protected information—
(a) for the purpose for which it was disclosed; or
(b) in carrying out any functions or exercising any powers under this Act or any other Act.