I wouldn't want to name a specific company. For instance, it would in my view be legal and justified if, say, your financial institution calls and says, “Monsieur Ménard, we have a new product that we'd like to inform you about” or ”We'd like to put you on our electronic mailing list” or “We'd like to have you as part of a study. Would you consent to do that?” If you consent to those three things, or more, then they have accurately done that.
If someone phones and says, “Monsieur Ménard, this is your financial institution”, and in fact it is someone who wants your personal information, of any type, to use for their own means or to sell online or to sell to someone else, that is the problem the bill was trying to address. So if someone phones you and says “Monsieur Ménard, I'm from the Bank of Montreal”, and in fact they are not, that is the problem I was trying to address.