I believe that agreements have to be established first. However, in the case of exchanges of information between governments, it's the Privacy Act that applies. That's a completely different act. The act we're discussing today applies to private organizations.
On October 22nd, 2009. See this statement in context.