Yes, but they are narrowly interpreted. Common exceptions include:
-
Information made public by the government.
-
Data required to comply with other laws (e.g., certain financial or health records).
-
Data needed for fraud prevention or security purposes.
Businesses must document the exception relied upon.