374.6(1)An employer shall not disclose to any person the identity of a person who is involved in an incident of violence or harassment or the circumstances related to the incident, other than when the disclosure is
(a)
necessary in order to investigate the incident,
(b)
required in order to take corrective measures in response to the incident, or
(c)
required by law.
374.6(2)The personal information that is collected, used or disclosed by the employer under sections 374.1 to 374.5 shall be limited to the minimum amount of information necessary to accomplish the purpose.