The Company takes appropriate steps to protect personal information and shall not disclose nor provide it to a third party in a form that allows an individual to be identified without the consent of that individual, except where allowed by the Personal Information Protection Law, and other laws and regulations.