[LadyMischief]

How about we remove all doubt and I just post from the Act itself:

Personal information

Personal information includes any factual or subjective information, recorded or not, about an identifiable individual. This includes information in any form, such as:

* age, name, ID numbers, income, ethnic origin, or blood type;
* opinions, evaluations, comments, social status, or disciplinary actions; and
* employee files, credit records, loan records, medical records, existence of a dispute between a consumer and a merchant, intentions (for example, to acquire goods or services, or change jobs)

Personal information does not include the name, title or business address or telephone number of an employee of an organization.

How about the definition of consent with regards to that personal information:
Consent

Voluntary agreement with what is being done or proposed. Consent can be either express or implied. Express consent is given explicitly, either orally or in writing. Express consent is unequivocal and does not require any inference on the part of the organization seeking consent. Implied consent arises where consent may reasonably be inferred from the action or inaction of the individual.

Disclosure

Making personal information available to others outside the organization
Use

Refers to the treatment and handling of personal information within an organization.

That should clear up the "definitions" for you a little.