KEY POINTS In Canada, commercial data brokers collect deidentified patient data from pharmacies, private drug insurers, the federal government and medical clinics without patient consent. Although pharmaceutical companies are the data brokers’ primary customers, academics and nonprofit and public entities also use commercial data sets, given the absence of a coordinated public approach to collecting these data across Canada. Risks of commercialized patient data include loss of anonymity, surveillance and marketing, discrimination and violation of Indigenous data sovereignty. Coordinated infrastructure for (...) the collection and coordination of health data across Canada and updated privacy legislation would protect individuals and communities and enable appropriate data uses. (shrink)