Again, I must put my response in context.
I'm much more familiar with the part of Quebec's legislation that applies to software used in the health care sector. In this context, the matter involves the use of personal information by public agencies. In these cases, clearly, we must obtain explicit consent for each use or purpose of the personal information provided.
In Quebec, the health legislation is stringent. However, in the private sector, it's a different story.