Privacy and Information — Ontario
Sourced from Canadian federal statutes and official sources. Provincial information reflects each province's own legislation and court rulings. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
The CRA's confidentiality duty is criminal, not aspirational. Section 241 of the Income Tax Act makes unauthorised disclosure of taxpayer information a criminal offence — and that has real teeth in cases of leaked data.
The Privacy Act and the Taxpayer Bill of Rights (Right #3) give you the right to have your information treated as confidential. No CRA employee may share your information without your written consent unless a specific provision of law authorises it.
You have the right to access your own information. Most of it is visible through My Account; for the rest, file an Access to Information and Privacy (ATIP) request. CRA owes a response within 30 days (extendable in narrow circumstances).
Errors in your file? Request corrections. Improper disclosure? File with the Privacy Commissioner of Canada.
When does it apply?
Applies to every person and business that files taxes or interacts with the CRA.
- The rights run whether you're filing, being audited, or receiving benefits.
- They cover every interaction channel — phone, mail, online, and in person.
What to Do If the CRA Improperly Discloses Your Tax Information in Canada
- Use My Account for the standard view: returns, assessments, benefit payments, correspondence.
- Submit an ATIP request if you need detailed internal CRA records about your file. They're often the smoking gun in disputes.
- File with the Privacy Commissioner if you believe your information was shared improperly.
- If someone else needs to access your information, authorise them with Form T1013 rather than handing over login details.
- Request corrections on any CRA record that's wrong about you.
What should you NOT do?
- Don't share My Account credentials. Use Form T1013 — that's the legal route.
- Don't hand out your SIN. CRA will never ask for it by email or text — anyone who does is a scammer.
- Don't assume CRA can share your data freely. They need legal authority or your written consent.
- Don't sleep on ATIP in a tax dispute. CRA's own internal notes can completely change a case.
How Ontario differs from federal law
Your tax information is protected by strict confidentiality rules under both federal and Ontario law. The CRA cannot share your tax information without your consent, except in limited circumstances defined by statute.
- Section 241 of the federal Income Tax Act prohibits CRA officials from disclosing taxpayer information except as authorized by law (e.g., to law enforcement with a court order, or to provincial tax authorities for tax administration).
- The Privacy Act (federal) gives you the right to access your personal information held by the CRA and to request corrections.
- Ontario's Freedom of Information and Protection of Privacy Act (FIPPA) protects personal information held by Ontario government institutions. If you have dealings with the Ontario Ministry of Finance (e.g., employer health tax, land transfer tax), your information is protected under FIPPA.
- You can control who accesses your CRA information by authorizing (or revoking) representatives using Form T1013 or through My Account.
- The CRA must keep your information for prescribed retention periods and then securely destroy it.
Additional Steps in Ontario
Access your tax information through CRA My Account. To file a privacy complaint, contact the Office of the Privacy Commissioner of Canada at 1-800-282-1376. For Ontario provincial records, file an access request under FIPPA with the relevant Ontario ministry. You can authorize or revoke representatives at any time through My Account or by filing Form T1013.
Relevant Law: Income Tax Act, R.S.C. 1985, c. 1 (5th Supp.), s. 241 (Taxpayer Confidentiality); Privacy Act, R.S.C. 1985, c. P-21; Freedom of Information and Protection of Privacy Act, R.S.O. 1990, c. F.31
Common Questions
What is the privacy and information right in Canada?
The CRA's confidentiality duty is criminal, not aspirational. Section 241 of the Income Tax Act makes unauthorised disclosure of taxpayer information a criminal offence — and that has real teeth in cases of leaked data.The Privacy Act and the Taxpayer Bill of Rights (Right #3) give you the right to have your information treated as confidential. No CRA employee may share your information without your written consent unless a specific provision of law authorises it.You have the right to access your own information. Most of it is visible through My Account; for the rest, file an Access to Informa...
When does privacy and information apply?
Applies to every person and business that files taxes or interacts with the CRA.The rights run whether you're filing, being audited, or receiving benefits.They cover every interaction channel — phone, mail, online, and in person.
What should I do if I think the CRA in Canada shared my personal tax information without my consent?
Use My Account for the standard view: returns, assessments, benefit payments, correspondence.Submit an ATIP request if you need detailed internal CRA records about your file. They're often the smoking gun in disputes.File with the Privacy Commissioner if you believe your information was shared improperly.If someone else needs to access your information, authorise them with Form T1013 rather than handing over login details.Request corrections on any CRA record that's wrong about you.
What mistakes should I avoid with privacy and information?
Don't share My Account credentials. Use Form T1013 — that's the legal route.Don't hand out your SIN. CRA will never ask for it by email or text — anyone who does is a scammer.Don't assume CRA can share your data freely. They need legal authority or your written consent.Don't sleep on ATIP in a tax dispute. CRA's own internal notes can completely change a case.
Privacy and Information in other states
Same topic, different jurisdiction. Pick the one that applies to you.