If the provision of personal data is what is legally required of or what its operation necessitates, the company may provide its staff's personal data to competent government agencies. However, the company should make it clear in its personal data collection statement, and let the staff know when collecting their personal data that their data may be referred to competent government agencies; and where possible, indicate the agencies. Besides, to secure the company's interests, it is advisable to have the statement signed by the staff, but it is not mandatory.