Privacy and Information — Quebec
Sourced from Canadian federal statutes and official sources. Provincial information reflects each province's own legislation and court rulings. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
The CRA's confidentiality duty is criminal, not aspirational. Section 241 of the Income Tax Act makes unauthorised disclosure of taxpayer information a criminal offence — and that has real teeth in cases of leaked data.
The Privacy Act and the Taxpayer Bill of Rights (Right #3) give you the right to have your information treated as confidential. No CRA employee may share your information without your written consent unless a specific provision of law authorises it.
You have the right to access your own information. Most of it is visible through My Account; for the rest, file an Access to Information and Privacy (ATIP) request. CRA owes a response within 30 days (extendable in narrow circumstances).
Errors in your file? Request corrections. Improper disclosure? File with the Privacy Commissioner of Canada.
When does it apply?
Applies to every person and business that files taxes or interacts with the CRA.
- The rights run whether you're filing, being audited, or receiving benefits.
- They cover every interaction channel — phone, mail, online, and in person.
What to Do If the CRA Improperly Discloses Your Tax Information in Canada
- Use My Account for the standard view: returns, assessments, benefit payments, correspondence.
- Submit an ATIP request if you need detailed internal CRA records about your file. They're often the smoking gun in disputes.
- File with the Privacy Commissioner if you believe your information was shared improperly.
- If someone else needs to access your information, authorise them with Form T1013 rather than handing over login details.
- Request corrections on any CRA record that's wrong about you.
What should you NOT do?
- Don't share My Account credentials. Use Form T1013 — that's the legal route.
- Don't hand out your SIN. CRA will never ask for it by email or text — anyone who does is a scammer.
- Don't assume CRA can share your data freely. They need legal authority or your written consent.
- Don't sleep on ATIP in a tax dispute. CRA's own internal notes can completely change a case.
How Quebec differs from federal law
Quebec taxpayers have privacy protections under both federal and provincial law. Revenu Quebec is subject to the Act respecting Access to documents held by public bodies and the Protection of personal information (CQLR c A-2.1).
- Revenu Quebec must keep your tax information confidential and can only share it in circumstances authorized by law — such as with the CRA under information-sharing agreements, or with certain Quebec government departments for administering social programs.
- You have the right to access your tax files held by Revenu Quebec. You can request a copy of your file or specific documents through an access to information request.
- The Commission d'acces a l'information du Quebec (CAI) oversees compliance with access and privacy laws for Quebec government bodies, including Revenu Quebec. If Revenu Quebec refuses an access request, you can appeal to the CAI.
- Revenu Quebec and the CRA share information under a tax collection agreement. This means income reported (or not reported) to one agency may be flagged by the other.
- You can view most of your tax information online through your My Account on revenuquebec.ca, including assessment notices, payment history, and carryforward amounts.
Additional Steps in Quebec
Access your tax information through My Account on revenuquebec.ca. For formal access requests, file with Revenu Quebec under the Act respecting Access. If your request is denied, appeal to the Commission d'acces a l'information (CAI) at cai.gouv.qc.ca. If you believe your tax information was improperly shared, contact the CAI and the Quebec Taxpayer Protection Officer.
Relevant Law: Act respecting Access to documents held by public bodies and the Protection of personal information (CQLR c A-2.1); Tax Administration Act (CQLR c A-6.002), ss. 69-71
Common Questions
What is the privacy and information right in Canada?
The CRA's confidentiality duty is criminal, not aspirational. Section 241 of the Income Tax Act makes unauthorised disclosure of taxpayer information a criminal offence — and that has real teeth in cases of leaked data.The Privacy Act and the Taxpayer Bill of Rights (Right #3) give you the right to have your information treated as confidential. No CRA employee may share your information without your written consent unless a specific provision of law authorises it.You have the right to access your own information. Most of it is visible through My Account; for the rest, file an Access to Informa...
When does privacy and information apply?
Applies to every person and business that files taxes or interacts with the CRA.The rights run whether you're filing, being audited, or receiving benefits.They cover every interaction channel — phone, mail, online, and in person.
What should I do if I think the CRA in Canada shared my personal tax information without my consent?
Use My Account for the standard view: returns, assessments, benefit payments, correspondence.Submit an ATIP request if you need detailed internal CRA records about your file. They're often the smoking gun in disputes.File with the Privacy Commissioner if you believe your information was shared improperly.If someone else needs to access your information, authorise them with Form T1013 rather than handing over login details.Request corrections on any CRA record that's wrong about you.
What mistakes should I avoid with privacy and information?
Don't share My Account credentials. Use Form T1013 — that's the legal route.Don't hand out your SIN. CRA will never ask for it by email or text — anyone who does is a scammer.Don't assume CRA can share your data freely. They need legal authority or your written consent.Don't sleep on ATIP in a tax dispute. CRA's own internal notes can completely change a case.
Privacy and Information in other states
Same topic, different jurisdiction. Pick the one that applies to you.