Shazam - that is true, but both FOIP and PIPA - I think the Y would fall under PIPA - must show that the collection of information is reasonable. Although the law is vague, I believe that the collection of driver's license info is unreasonable - you can verify info on the D/L but not collect the actual license itself and the license #. The Office of the Privacy Commissioner of AB came out with a ruling on this about a year ago - I'll see if I can find it.
I don't think she needs to be fired, but they do need to clean up their policies and procedures there.
ETA: Here's the finding - speaks more to the collection of info, not the actual license, but it can be interchanged.
http://alberta.ca/home/NewsFrame.cfm...D4C36F020.html