Different companies have different policies regarding personal data collection. When collecting personal data, the employer should tell the staff about the purposes and usage of the data collected, among other things. If the company policy is that information about staff performance will be provided to other companies upon request, the personal data collection statement should state so. And, with the authorization of the data subject, such information may be provided. If the company does not abide by its statement, it is likely to breach the Personal Data Protection Act.