On one hand, a person under investigation may only provide personal or bank customer data, on a voluntary basis, with the prior express consent of the customer. (globalinvestigationsreview.com)
Anyone passing around DVDs without express consent from his employer, especially about things like this is in violation. (religion.blogs.cnn.com)
You will also want to establish procedures for obtaining express consent, for maintaining lists of recipients who fall under implied consent, and for removing recipients when implied consent expires. (lawnow.org)