As a service provider, you must have an individual’s consent to collect, use or disclose personal information — except in certain cases permitted by the act.

Even when you have consent, there are limits on when and how much personal information you can collect, use or disclose. For example, you must only collect, use or disclose as much personal information as is reasonably necessary to provide a service.

Learn more about collection, use and disclosure

This post is also available in: French