46.3A public body may perform data matching using personal information in its custody or control, provided there is authority for the collection, use or disclosure of the personal information being used for data matching or created as a result of data matching.