Administration is permitted. If it's necessary for the proper administration of the act, then these disclosures can take place. If Mr. Swadron were here, you might find him dealing with complaints about the RCMP having, for example, too many handlers involved with access to a protectee's file. There's a standard about who has access to the protected information, and it's on a need to know basis.
So you'd be looking at the relevance of that. Is it possible to set up a system where the prohibited information would be codified? Most of the time that's what happens. It's possible you could have this review done in an anonymous way without revealing the sensitive information, and that would not be a problem.