(1) The personal information that has been collected by any public body or remained under the responsibility or control of such a body shall be protected by such body.
(2) For the purpose of sub-section (1), the public body shall have to make appropriate arrangement against unauthorized access likely to occur to personal information, or against the possible risk of unauthorized use, change, disclosure, publication or transmission of such information.
(3) Notwithstanding anything contained elsewhere in this Section, the public body may disclose or get any personal information disclosed under the prevailing law.