Where disclosure of user information is permitted to be made for any purpose or in any circumstance under paragraph CSD-3.2.3 to a body corporate, the user information may be disclosed only to those officers of the body corporate to whom the disclosure is necessary for the relevant purpose.