I think the legislation provides certain exceptions for disclosure, either under my legislation—the Privacy Act—or the Access to Information Act. Departments have leeway with that. There are some valid public interest reasons to prevent disclosure under legislation, but recourse exists to challenge those.
On May 1st, 2024. See this statement in context.