Privacy and Information

Source: Privacy Act, R.S.C. 1985, c. P-21; Access to Information Act; Income Tax Act, Section 241; Taxpayer Bill of Rights, Right #3

Written in plain language for general understanding. This is educational content, not legal advice. Based on Canadian federal statutes and official sources.

Canadian Federal Law

What is this right?

The CRA is legally required to protect your personal tax information. Section 241 of the Income Tax Act makes unauthorized disclosure of taxpayer information a criminal offence.

The Privacy Act and the Taxpayer Bill of Rights (Right #3) give you the right to have your information treated as confidential. No CRA employee can share your information without your written consent unless specifically authorized by law.

You have the right to access your own information. You can view much of it through My Account, or submit a formal request under the Access to Information and Privacy (ATIP) process. The CRA must respond within 30 days.

If your information contains errors, you can request corrections. If the CRA shares your data improperly, you can file a complaint with the Privacy Commissioner of Canada.

When does it apply?

This applies to every person and business that files taxes or interacts with the CRA in any way.

  • Your privacy rights apply whether you are filing a return, being audited, or receiving benefits.
  • These protections cover all CRA interactions — phone, mail, online, and in person.

What should you do?

  • Access your information through My Account — it shows your returns, assessments, benefit payments, and correspondence.
  • Submit an ATIP request if you need detailed records the CRA holds about you.
  • File a complaint with the Privacy Commissioner if you believe your information was shared improperly.
  • Authorize a representative using Form T1013 if you want someone to access your information on your behalf.
  • Request corrections if your CRA records contain errors.

What should you NOT do?

  • Don't share your My Account login credentials with anyone — use Form T1013 to authorize a representative instead.
  • Don't give your SIN to anyone who doesn't legally need it — the CRA will never ask for your SIN by email or text message.
  • Don't assume the CRA can share your information freely — they need legal authority or your written consent.
  • Don't overlook ATIP requests in tax disputes — getting the CRA's internal records can be valuable for your objection or appeal.

You came here to know your rights — help someone else know theirs.

Support This Mission