The complainant was also a patient at a psychiatric institute. The complainant believed that the College's actions in obtaining the risk assessment breached the Freedom of Information and Protection of Privacy Act . The Occupational Health and Safety Act did not expressly authorize the collection of the risk assessment. The IPC recommended that the College takes steps to ensure that personal information is not collected except in compliance with the Act . It involves personal information that has been collected indirectly, and used for a purpose which may not have been intended at the time of the original collection.
Data sharing happens when organizations share or compare personal information in any format.
Computer matching is basically a sub-set of data sharing. It involves sharing of information from two or more electronic databases of information. The computer matching program merges files on individuals to identify specific areas and creates another electronic file. The agreement clarifies the rights and obligations of all parties and helps to ensure compliance with the privacy provisions of the Act . The IPC considers that any sharing of personal information should be supported by a written data sharing agreement.