Consent To Share Information Template for Canada

When your organization needs to share personal information with third parties in Canada, obtaining proper consent is both a legal requirement and a business necessity. Under Canadian privacy law, you must secure explicit consent before collecting, using, or disclosing personal information, and this consent must be informed, meaningful, and documented.

When do you need this document?

You require a Consent To Share Information document whenever your organization plans to share personal data beyond its original collection purpose. This includes sharing customer information with service providers, transferring employee data to benefit administrators, or providing client details to partner organizations. Healthcare providers need this consent when sharing patient information with specialists or insurance companies. Educational institutions require it when sharing student records with scholarship organizations or potential employers. Financial institutions use these forms when sharing account information with credit agencies or investment partners. The document is also essential when transferring personal information across provincial boundaries or internationally.

Key legal considerations

Your consent document must clearly identify what information will be shared, who will receive it, and for what specific purposes. Under PIPEDA and provincial privacy laws, consent must be meaningful, which requires plain language explanations that individuals can understand. You must specify the retention period for shared information and explain any security measures in place. The document should outline the individual's right to withdraw consent and the potential consequences of refusal. For sensitive information like health records or financial data, you may need enhanced consent requirements. Consider including clauses about data breach notification procedures and cross-border transfer protections. The consent must be voluntary, and you cannot make services conditional on consent unless the information sharing is essential for service delivery.

Legal requirements in Canada

Federal PIPEDA governs private sector organizations operating across provinces or internationally, requiring organizations to obtain consent that meets the "reasonable person" standard. Provincial laws like Alberta's PIPA, British Columbia's PIPA, and Quebec's Private Sector Act may apply depending on your organization's location and scope. In Ontario, PHIPA governs health information sharing and requires specific consent elements for personal health information. Your consent form must comply with the most stringent applicable law when multiple jurisdictions are involved. Organizations must maintain records of consent and be prepared to demonstrate compliance during privacy audits. The consent document should reference the specific privacy legislation that applies and inform individuals of their rights under that law, including complaint procedures with privacy commissioners.