1. A body designated in section 2 shall refuse to release or to confirm the existence to a person of information obtained by the body through its internal security service in the course of an investigation conducted by such service held to prevent, detect or repress crime or statutory offences that may be or have been committed within that body by its members, the members of its board of directors or the members of its personnel, if the disclosure of such information would likely entail one of the consequences set out in subparagraphs 1 to 9 of the first paragraph of section 28 of the Act respecting Access to documents held by public bodies and the Protection of personal information (chapter A-2.1). That obligation is valid for a period of 2 years from the date on which the body obtains the information.