(1)
The registered code agency shall maintain records of all plans review and inspection activity, of all certificates and orders and of any other activities taken in carrying out functions under an appointment in accordance with the quality management plan described in Clause 3.4.3.2.(1)(d).
(2)
Any information collected by a registered code agency in the course of the exercise of powers and the performance of duties under the Act may be used only for the purpose of performing functions under an appointment under subsection 4.1(2) of the Act and may be disclosed only,
(a)
to a principal authority pursuant to an agreement under subsection 4.1(1) of the Act,
(b)
to a principal authority to aid the enforcement in any manner of the Act, or
(c)
where required or permitted under the Act, this Code, other applicable legislation or an order of a court.
(3)
A registered code agency shall ensure that any agreement under which the registered code agency engages a person to assist the registered code agency to perform functions under an appointment includes a provision that requires the person to comply with Sentences (1) and (2).