Canada

Can a company collect my personal information without my consent?

Usually require
Consent status
7 exceptions
No-consent scenarios
Reasonable expe
Consent standard
Federal law
Applies to
The Short Answer

Generally, no — a company cannot collect your personal information without your consent in Canada, but there are limited exceptions under federal law.

What the Law Says

Canada’s federal privacy law — the Personal Information Protection and Electronic Documents Act (PIPEDA) — sets strict rules about when and how businesses may collect your personal information.

Under PIPEDA, organizations must generally obtain your meaningful consent before collecting, using, or disclosing your personal information. Consent is only valid if it meets a key test: it must be reasonable to expect that you understand the nature, purpose, and consequences of the collection, use, or disclosure.

However, PIPEDA also recognizes narrow situations where collection can happen without your knowledge or consent. Section 7 lists specific exceptions — for example, when collection is clearly in your interest and obtaining consent is not feasible (e.g., emergency medical care), or when it’s required by law (e.g., court order), or for journalistic, artistic, or literary purposes.

Statutory Text

Consent is only valid if it is reasonable to expect the individual to understand the nature, purpose and consequences of the collection, use or disclosure.

Personal Information Protection and Electronic Documents Act, s. 6.1 — Valid consent
Statutory Text

Specifies circumstances in which personal information may be collected without knowledge or consent of the individual.

Personal Information Protection and Electronic Documents Act, s. 7 — Collection without knowledge or consent

What to Do

1

Check the organization’s privacy policy — it must clearly explain why and how your information is collected.

2

Ask whether consent was obtained meaningfully — e.g., was the purpose explained in plain language?

3

If you believe your information was collected unlawfully, file a complaint with the Office of the Privacy Commissioner of Canada (OPC).

4

You have the right to withdraw consent at any time, unless prohibited by law.

Sources

Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: 2026-06-08.