In my opinion, the two acts do not contradict one another. The Access to Information Act is simply silent on that particular matter. It does not say whether or not we have that right.
However, the Privacy Act very clearly stipulates that, not because it’s an access to information request, but simply because no personal information can be released without the consent of the individual involved.
As to whether a specific clause should be added stating that this is a violation of the Act, I personally believe it would be a good idea. At the present time, only our legislation does that.