Division 3—Use and disclosure of protected information