Canada

Can a company deny me service if I refuse to give unnecessary personal information?

PIPEDA
Governing law
Schedule 1
CSA Model Code
Necessary only
Info requirement
s. 5
Compliance duty
The Short Answer

Yes, a company can deny you service if you refuse to give personal information — but only if that information is necessary for the identified purpose. If it’s unnecessary, they cannot require it or deny service.

What the Law Says

Canada’s federal privacy law — the Personal Information Protection and Electronic Documents Act (PIPEDA) — sets strict rules about when businesses can collect your personal information.

Under PIPEDA, organizations must follow the 10 privacy principles in Schedule 1 (the CSA Model Code for the Protection of Personal Information). One key principle is 'Limiting Collection': organizations may collect personal information only for purposes that a reasonable person would consider appropriate in the circumstances — and only information that is necessary for those purposes.

If a business asks for personal information beyond what’s needed to provide the service (e.g., asking for your SIN to rent a bike), that violates PIPEDA. And if they deny you service solely because you refuse unnecessary information, that may also breach the law — because consent must be meaningful, and you can’t be forced to give up more privacy than required.

PIPEDA does not give individuals an absolute right to receive service without providing *any* personal information — but it does prohibit requiring *unnecessary* information as a condition of service.

Statutory Text

Organizations must comply with the obligations set out in Schedule 1 (the CSA Model Code for the Protection of Personal Information).

Personal Information Protection and Electronic Documents Act, s. 5 — Compliance with obligations

What to Do

1

Ask the business why the information is needed and how it will be used.

2

If the request seems unnecessary (e.g., date of birth to buy coffee), politely refuse and ask if service can still be provided.

3

If denied service unreasonably, file a complaint with the Office of the Privacy Commissioner of Canada (OPC) within 6 months.

4

Keep records: note who asked, what was requested, and how you responded.

Sources

Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: 2026-06-08.