Yes, unless your boss is able to provide evidence to the Academy’s Deputy Information Officer of your consent to share “special personal information’’ and for what purpose it needs to be processed. Your boss is welcome to appeal the decision of the DIO or contact your region’s privacy authority.