The Public Health Agency of Canada (PHAC) recently admitted to the non-consensual use of the sensitive location data of 33 million Canadian mobile devices. The location data accessed by PHAC was collected through cellular towers and provided by Telus. This non-transparent use of the personal information of many Canadians is a clear sign that we desperately need to update Canada’s privacy laws. Without binding accountability and transparency provisions in public and private sector privacy laws, organizations PHAC and Telus are unconstrained in their ability to collect, use, and share the data of people in Canada.