I'm going to ask you a question that you should like.
Let's set this specific situation aside and deal with the issue a little more broadly.
What kind of consent should Canadians be giving for their data to be de-identified and used for legitimate purposes?