28.18.Despite sections 9 and 83 of the Act respecting Access to documents held by public bodies and the Protection of personal information (chapter A-2.1), the Authority may not communicate a complaint record without the authorization of the authorized deposit institution that has sent it.