The Alberta Office of the Information and Privacy Commissioner («OIPC») held that in the absence of consent, there was no provision in PIPA that
authorized the Union's collection,
use and disclosure of personal information and that the Union's activity did not fit within any statutory
exemption.
For the Department of State, however, the final rule provides a limited
exemption that allows a component of the Department of State without an authorization to (1)
use protected health information to make medical suitability determinations and (2) to disclose whether or not the individual was determined to be medically suitable to
authorized officials in the Department of State for the purpose of a security clearance investigation conducted pursuant to Executive Order 10450 and 12698.