I will say yes, and I can expand that to say the law facilitates, as a legal matter, information sharing. The safeguards—and you say, the “controls”, but I'll say the “safeguards”—to ensure that these activities are not excessive are administrative and not legally required for the most part.
On November 22nd, 2016. See this statement in context.