Merchants' obligations to protect your information
Merchants must implement reasonable security measures to protect personal information, based on the sensitivity of the information they hold.
Merchants are required to inform you why they collect your personal information and to limit their collection to the information necessary for these purposes.
They have an obligation to notify affected individuals and the Commission d'accès à l'information in the event of a data breach that poses a serious risk of harm.
You have the right to be informed that a company holds information about you and to access it.
For more information, visit the website of the Commission d'accès à l'information. If you believe your right to privacy has been violated, contact the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information.
Learn more about online personal information protection
What information should be shared and with whom?
Online, what information should you provide?
Reduce the sharing of your information
How can we reduce the sharing of our personal information?