Under our project management framework, we assess privacy factors for each of our projects. As I said in the example I provided, that assessment covers everyone involved. In this particular case, every department that needed the information had to present their own case to the Privacy Commissioner to be able to use the information for the purpose sought.
On May 27th, 2015. See this statement in context.