British Columbia Privacy and Information Laws (2026)

Last verified:

Source: Privacy Act, R.S.C. 1985, c. P-21; Access to Information Act; Income Tax Act, Section 241; Taxpayer Bill of Rights, Right #3

About this article

Sourced from Canadian federal statutes and official sources. Provincial information reflects each province's own legislation and court rulings. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards

Canadian Federal Law

What is this right?

The CRA's confidentiality duty is criminal, not aspirational. Section 241 of the Income Tax Act makes unauthorised disclosure of taxpayer information a criminal offence — and that has real teeth in cases of leaked data.

The Privacy Act and the Taxpayer Bill of Rights (Right #3) give you the right to have your information treated as confidential. No CRA employee may share your information without your written consent unless a specific provision of law authorises it.

You have the right to access your own information. Most of it is visible through My Account; for the rest, file an Access to Information and Privacy (ATIP) request. CRA owes a response within 30 days (extendable in narrow circumstances).

Errors in your file? Request corrections. Improper disclosure? File with the Privacy Commissioner of Canada.

When does it apply?

Applies to every person and business that files taxes or interacts with the CRA.

  • The rights run whether you're filing, being audited, or receiving benefits.
  • They cover every interaction channel — phone, mail, online, and in person.

What to Do If the CRA Improperly Discloses Your Tax Information in Canada

  • Use My Account for the standard view: returns, assessments, benefit payments, correspondence.
  • Submit an ATIP request if you need detailed internal CRA records about your file. They're often the smoking gun in disputes.
  • File with the Privacy Commissioner if you believe your information was shared improperly.
  • If someone else needs to access your information, authorise them with Form T1013 rather than handing over login details.
  • Request corrections on any CRA record that's wrong about you.

What should you NOT do?

  • Don't share My Account credentials. Use Form T1013 — that's the legal route.
  • Don't hand out your SIN. CRA will never ask for it by email or text — anyone who does is a scammer.
  • Don't assume CRA can share your data freely. They need legal authority or your written consent.
  • Don't sleep on ATIP in a tax dispute. CRA's own internal notes can completely change a case.
British Columbia Law

How British Columbia differs from federal law

Your tax information is protected by confidentiality rules at both the federal and provincial level.

  • The CRA protects federal tax information under the federal Income Tax Act and Privacy Act. These rules are the same across Canada.
  • For BC provincial tax information, the Freedom of Information and Protection of Privacy Act (FIPPA) governs how the BC government collects, uses, and discloses your personal information, including tax data held by the Ministry of Finance.
  • You have the right to request your own records from the BC Ministry of Finance under FIPPA. The request must be responded to within 30 business days.
  • BC Ministry of Finance officials are prohibited from disclosing your tax information except as authorized by statute — for example, for tax collection, audit, or as required by court order.

Additional Steps in British Columbia

For access to your federal tax records, use CRA My Account or file a formal access request under the federal Privacy Act. For BC provincial tax records, make a Freedom of Information request to the BC Ministry of Finance under FIPPA. You can submit the request online through the BC Government's FOI portal. There is no fee for requesting your own personal information.

Relevant Law: Freedom of Information and Protection of Privacy Act, RSBC 1996, c. 165; Privacy Act, RSC 1985, c. P-21 (federal); Income Tax Act, RSC 1985, c. 1 (5th Supp.), s. 241

You shouldn't have to hire a lawyer to assert your rights.

Answer a few questions. We generate a personalized letter citing your state's exact statutes, deadlines, and penalties — ready to print and send in minutes.

Lawyers charge $350+. Your letter: $19.

Common Questions

What is the privacy and information right in Canada?

The CRA's confidentiality duty is criminal, not aspirational. Section 241 of the Income Tax Act makes unauthorised disclosure of taxpayer information a criminal offence — and that has real teeth in cases of leaked data.The Privacy Act and the Taxpayer Bill of Rights (Right #3) give you the right to have your information treated as confidential. No CRA employee may share your information without your written consent unless a specific provision of law authorises it.You have the right to access your own information. Most of it is visible through My Account; for the rest, file an Access to Informa...

When does privacy and information apply?

Applies to every person and business that files taxes or interacts with the CRA.The rights run whether you're filing, being audited, or receiving benefits.They cover every interaction channel — phone, mail, online, and in person.

What should I do if I think the CRA in Canada shared my personal tax information without my consent?

Use My Account for the standard view: returns, assessments, benefit payments, correspondence.Submit an ATIP request if you need detailed internal CRA records about your file. They're often the smoking gun in disputes.File with the Privacy Commissioner if you believe your information was shared improperly.If someone else needs to access your information, authorise them with Form T1013 rather than handing over login details.Request corrections on any CRA record that's wrong about you.

What mistakes should I avoid with privacy and information?

Don't share My Account credentials. Use Form T1013 — that's the legal route.Don't hand out your SIN. CRA will never ask for it by email or text — anyone who does is a scammer.Don't assume CRA can share your data freely. They need legal authority or your written consent.Don't sleep on ATIP in a tax dispute. CRA's own internal notes can completely change a case.

Privacy and Information in other states

Same topic, different jurisdiction. Pick the one that applies to you.

You came here to know your rights — help someone else know theirs.

Support This Mission