A broker is contacted by a third-party marketing firm that wants to buy the brokerage’s...

This question addresses Privacy and Confidentiality, which are core components of the Information Management and Professionalism, Integrity, and Ethics competencies. Brokers in Ontario are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), which governs how personal information is collected, used, and disclosed in commercial activities.

Under the RIBO Level 1 Blueprint, a broker must understand that a client provides their personal information to the brokerage for the specific purpose of procuring insurance. Using that data for a secondary purpose (like a third-party marketing list) requires Express Consent (Option B). This means the client must be clearly informed and must "opt-in" to having their data shared.

The RIBO Code of Conduct (Regulation 991) also mandates that a broker must hold in strict confidence all information acquired in the course of their professional relationship. Selling or sharing a client list without consent is a severe breach of trust and a violation of federal law. Option C is incorrect because "confidentiality agreements" between the firms do not supersede the client's right to control their own data. Option D is incorrect because names and addresses are absolutely considered "personally identifiable information" (PII).

The RIBO Competency Profile emphasizes that brokers must act as "data stewards." In the modern era of high-profile data breaches, demonstrating a commitment to Cybersecurity and Privacy is essential for maintaining Relationship Management with the public. A Level 1 broker must ensure that the brokerage's "Privacy Policy" is transparent and that all client files are managed in a way that respects the legal rights of the consumer.