Akin to other personal information that would be protected under the Privacy Act, as my Justice colleague reminds me, the person who has access to the reason is the owner or the subject of that personal information, not the other person involved in the transaction.
On June 7th, 2018. See this statement in context.