There was no prohibition against the collection, use, or disclosure of personal information.
Remember that PIPEDA creates this general prohibition. It says that you can't collect, use, or disclose without consent, except in these circumstances. Section 7 sets out those circumstances whereby you can collect, use, or disclose without consent.