Elias Motta is the office manager and payroll clerk for his company, which is composed of 12 employees. An employee, Sylvia Gladwin, stops by Elias's office and wants to view her payroll record. What privacy regulations must Elias consider before granting her co-worker access?