In essence, the difference would be that where the personal information is employment-related there would be no requirement for consent, provided the information is being used, collected, and disclosed for reasonable business purposes. I'm not using the exact or appropriate terms of that legislation, but in essence, that's the case.
