. . . "Agencies should consider whether providing the information to a third party, including the complainant, would be disproportionate to the nature and seriousness of the misconduct." .