{"id":1617,"slug":"crea-privacy-code-2001-10-principles","title":"CREA Privacy Code (in place since 2001) — 10 PIPEDA principles; brokerages must obtain seller/buyer consent for board collection/use/disclosure and produce proof on request","kind":"reference","scope":"business","status":"current","audiences":["kevin","candid-team"],"topics":["privacy-pipeda","mls-data-licensing"],"reference_body":"**Claim.** CREA Privacy Code, in place since 2001, codifies the 10 PIPEDA principles for the realtor context. Brokerages must obtain seller/buyer consent for the board to collect/use/disclose the listing & transaction info, and produce proof on request.\n\n**Source.** crea.ca; Alberta provincial MLS rules echo it, accessed 2026-06-21.\n\n**Confidence.** Verified.\n\n**Caveats.** Consent recordkeeping is a real operational obligation; whether brokerages consistently produce proof on request is a separate enforcement question.\n\n**Implication / use.** The consent-chain anchor. Any product that processes MLS-sourced personal info must consider the consent chain back to the original brokerage-collected consent.","rationale_body":null,"metadata":null,"links":{"outgoing":[{"slug":"research-brief-mls-data-inside-the-box-ontario-june-2026","title":"Research notes (capture-layer): inside the MLS box — what an Ontario member agent's account exposes, what goes unused, and what they're licensed to do with it (June 2026)","kind":"research-notes","scope":"business","link_type":"depends-on"},{"slug":"pipeda-ontario-no-substantially-similar-law-applies-in-full","title":"Ontario has no substantially-similar private-sector privacy law → PIPEDA applies in full to MLS personal info (only BC, AB, QC have substantially-similar laws)","kind":"reference","scope":"business","link_type":"relates-to"}],"incoming":[{"slug":"research-brief-mls-data-inside-the-box-ontario-june-2026","title":"Research notes (capture-layer): inside the MLS box — what an Ontario member agent's account exposes, what goes unused, and what they're licensed to do with it (June 2026)","kind":"research-notes","scope":"business","link_type":"relates-to"},{"slug":"rule-mls-sold-price-address-needs-consent-not-publicly-available","title":"Rule: do not republish sold price + address from MLS without consent. OPC #2009-002 — MLS-sourced ≠ registry-sourced; the \"publicly available\" exemption fails when the MLS is the source","kind":"rule","scope":"business","link_type":"depends-on"}]},"created_at":"2026-06-21T10:51:32.840Z","updated_at":"2026-06-21T10:51:32.840Z"}