I am somewhat less aware of what the Correctional Service does but I will nevertheless try to answer your question.
Generally, it depends on what kind of personal information we are dealing with. The Privacy Act restricts the use and acquisition of information about an individual. To give a short answer to your question, I would say that if the Correctional Service obtains the agreement of the individual, it can provide this information.