We're dealing with people's private information, which they're providing to CRA on the basis that it will be kept private.
On what basis would a bank be entitled to receive that information? Would it need the consent of the mortgage applicant, for example, to get that information, or would the bank have to obtain it?