Why do we need signed authorization?
Bill C6 AKA PIPEDA or The Personal Information Privacy Electronic Documents Act says Personal information is any information about an identifiable individual and, therefore, such signed authorization is required to release any data of this nature.
There are also numerous Provincial Legislations that address this issue in much the same manner.
This protects all parties involved in the process and is a best hiring practice.