KEY POINTS In Canada, commercial data brokers are currently able to use deidentified patient data from pharmacies, private drug insurers, the federal government and medical clinics without patient consent. They are able to do this because of a lack of privacy protections for deidentified data. A