This is one of the recommendations that many people are making for a Criminal Code amendment. It is in fact an offence under the Criminal Code right now to collect and possess credit card information without lawful excuse. I believe it may be so in some other specific situations.
The law enforcement agencies say they can sometimes catch someone with a huge amount of non-credit card data and other personal information and documents, such as social insurance numbers, names, and addresses, which it's pretty clear that person was planning to use for identity fraud purposes. But because there is no specific offence in the Criminal Code for possession of that kind of information without lawful excuse, they have nothing to charge the person with.
It is one of the possible Criminal Code amendments that I know the Department of Justice is looking at and we are looking at as well.
But I think you need to be very careful before simply creating new offences. There may be many situations in which people lawfully have information about others, with a lawful excuse. There definitely needs to be a criminal intent requirement. But it is certainly the case that much of the unauthorized collection is not a criminal offence right now.