(2) Make any records available to individuals other than:
- (i) individuals who are the subjects of the records (“subject individuals”);
- (ii) individuals who can prove they have the consent of the subject individual; or
- (iii) individuals acting as legal representatives on behalf of such subject individuals.