Actually, before PIPEDA was amended, we had the bank crime prevention and investigation body. It facilitated the exchange of this type of information among the banks, but with the most recent change to PIPEDA, we've taken away investigative bodies and now we have these two exemptions from disclosure. The problem was that instead of saying “criminal activity”, the exemption said “fraud”. That definition limits what the banks are able to do.
On May 11th, 2017. See this statement in context.