All of the real estate firms are still required under PIPEDA, or the substantially similar provincial laws, to safeguard that information. So there still is a legal requirement to safeguard the data.
I hear you, though. They need to understand that they are now collecting extensive information.