(1) If information must be redacted from a final review report under section 53, the Board must prepare another report (a protected review report) that includes:
(a) the redacted information; and
(b) the reasons for redacting the information from the final review report.
(2) If a protected review report is prepared under this section, the Board must give the Minister, and the Prime Minister, a copy of:
(a) the final review report prepared under section 52; and
(b) a copy of the protected review report.
(3) The Minister may give a copy of the protected review report, or an extract of the protected review report, to any other Commonwealth body, a State body or an entity but only for the purposes of one or more of the following:
(a) the performance of the functions of a Commonwealth body relating to responding to, mitigating or resolving a cyber security incident;
(b) the performance of the functions of a State body relating to responding to, mitigating or resolving a cyber security incident;
(c) informing and advising the Minister, and other Ministers of the Commonwealth, about a cyber security incident;
(d) the performance of the functions of an intelligence agency.