Respectfully to the American "this isn't that big a deal crowd": you're looking at it from the perspective that this is a commonplace occurrence in your country.

IANAL but I have filed privacy complaints in the past at both the federal and provincial level. For the last 26 years in Canada it has been illegal for personal information to be bought and sold on a whim; the person to whom the information applies is considered to be the owner and is entitled to be in control of how their information is used, and may revoke consent.

You have an entire country where institutions operate under the expectation that personally identifiable information isn't easily available like this (sans the usual data breaches). Those institutions are probably less prepared to deal with this data floating around everywhere than in a society where it is essentially a free-for-all.

In Canada, for most of the 20th century until maybe 15 years ago, your PII was in a big book that lived at everybody's house and the library unless you specifically opted out.

When did you last try with the OPC? I also have experience (a few) and noted a sharp decline post covid. My first go was for Freedom Mobile (success) but the representative from the OPC was borderline harassing me to accept the currently (STILL) completely broken authentication. When I tried again it was 'out of jurisdiction' and no sort of appeal process.

Calling it functional is not something I would do. Judges are also extremely critical of the compensation process a have essentially been forced to take it over. It's also still too new and risky so lawyers are reluctant unless it's paid up front.

If anyone with any say is reading this, I can still break into any Freedom Mobile account in under a minute, including the admin ones.

> You have an entire country where institutions operate under the expectation that personally identifiable information isn't easily available like this

I actually look like this as the opposite—SSNs, emails, phone numbers, and credit card numbers are more or less public, or at least relatively easy to guess, buy, or find online, and addresses are quite easy to find if you don't hide behind an LLC. I treat all as if they're public information and I assume our institutions do as well.

My understanding is that voter registration data is a matter of public record in most (all?) states so the idea that it wouldn’t be a matter of public record north of the border is itself odd to me.