The persons to whom the Secretary, or an authorised APS employee, may disclose protected information are the following: