Source: http://www.slaw.ca/2015/08/13/due-diligence-required-when-using-exemptions-to-disclose-personal-information-without-consent/