the protected information was obtained, generated or adopted by the entity for the purposes of complying with this Act; and