We've used our lawyers to design a template that meets the legal requirements, because we're requesting information using a piece of legislation. We have made it as simple as possible. Across the government, the forms are pretty standard. Depending on the seriousness or the nature of the information requested, we're quite permissive in terms of our frontline officers making the requests directly to the other agency themselves.
In a case that's a bit more complex, I would probably expect a one-up sign-out or some legal advice, but it's a well-used, long-established process that we use, and it's based on a lot of trust between government agencies. We trust each other to not drop the ball and to not get this wrong, because we are dealing with other people's information and managing other agencies' information. I'm sure, as in Canada, privacy breaches where sensitive information has got out into the public domain through public service incompetence are treated very seriously.