I don't sense any daylight between us on this one. I think there's nothing particularly in the Access to Information Act, but there is an appropriate provision in the Privacy Act that protects personal information. I think what the investigation should conclude is whether that personal information--the requester's name--was properly disclosed or improperly disclosed; it depends on the circumstances. Maybe there was consent, or maybe it was already publicly known. I'm not sure what.... There may be some justification for it. I think the prohibition is there, but it is in the Privacy Act, and there are no penalties in either act. The prohibition is in the Privacy Act, and there are no penalties in either act.
On October 2nd, 2006. See this statement in context.