[...]
(2) Subject to any other Act of Parliament, personal information under the control of a government institution may be disclosed
(f) for the purpose of administering or enforcing any law or carrying out a lawful investigation, under an agreement or arrangement between the Government of Canada or any of its institutions and any of the following entities or any of their institutions:
(i) the government of a foreign state,
19 (1) Subject to subsection (2), the head of a government institution shall refuse to disclose any personal information requested under subsection 12(1) that was obtained in confidence from
(a) the government of a foreign state or an institution thereof;
