First, I salute you for asking this question. You’d be surprised at how many organizations would just go ahead and disclose such information without considering the privacy implications. I’m assuming that you’re with a public or governmental organization. If so, what you need is what’s called an Information Sharing Agreement. The best thing I can do is direct you right to the horse’s mouth, in this case BC OIPC. Here are their guidelines for ISAs. https://www.oipc.bc.ca/guidance-documents/2066
Hope that helps and feel free to loop back with me directly at glennd@bongarde.com if it doesn’t. Glenn
