As Mr. Schaan just said, the Privacy Commissioner has oversight over all collection, disclosure and use of personal information, which would include sensitive information. It would obviously include financial data as well.
The commissioner does a contextual analysis. Information that's not sensitive in one context may be sensitive in another context. Information together may become sensitive where individual categories are not sensitive. That's how the Privacy Commissioner looks at personal information. He determines whether it's sensitive or not and requires obligations that are commensurate with the sensitivity of the information.
The office absolutely looks at financial information. There are many cases where they have said that financial information is sensitive, and there are cases where they've said in another context that it's not sensitive.