57(2)A custodian may perform data matching using personal health information in its custody or control, provided there is authority for the collection, use or disclosure of the personal health information being used for data matching or created as a result of data matching.