(1) The Agency shall have the power to collect, use and process the following personal data for the purposes of implementation of the objectives of the Act and in accordance with applicable data privacy regulations, namely:—
(a) sex or gender of the athlete;
(b) list of Anti-Doping Rule Violations committed by an athlete under the Act and the details of such violation;
(c) medical history of the athlete;
(d) whereabouts information of the athlete;
(e) any other personal data as may be specified by regulations.
(2) The Agency may make regulations to govern the procedure for collection, usage, processing and disclosure of the personal data specified in sub-section (1).
(3) The Agency shall establish and maintain a database to record all the sanctions awarded by the Agency, the Disciplinary Panel and the Appeal Panel and such other details of the sanctions, in such manner, as may be specified by regulations.
(4) The Agency shall publicly disclose the disposition of the anti-doping matter, including the sport, the anti-doping rule violated, the name of the athlete or other person committing the Anti-Doping Rule Violation, the prohibited substance or prohibited method involved (if any) and the consequences imposed, in accordance with such procedure as may be specified by regulations.