Yes. The Office of the Privacy Commissioner, to my understanding, currently has at least two complaints before it regarding ArriveCAN. One of them is my complaint.
The Privacy Commissioner has also stated quite clearly that there are no data-sharing agreements in place for how the data is being transmitted by the subcontractors that are hidden behind those contracts.