Does the Data Privacy Act inhibit data sharing?