An operator must not make available to a health and safety committee information of a confidential medical nature relating to a person who is or was an employee, unless:
(a) the person has given to the operator an authority allowing the information to be made available to the committee; or
(b) the information is in a form that does not identify the person or enable the person's identity to be discovered.