Information under subsection (1) may include personal information (within the meaning of the Privacy Act 1988).