In British Columbia, Alberta and Quebec, provincial private-sector privacy laws apply to most businesses operating within the province instead. In BC that's the Personal Information Protection Act (PIPA).
Whichever law applies, the basics are similar: say why you're collecting information, use it only for that purpose, keep it secure, and let people see what you hold.
Why it matters to an agent
Lead forms, CRMs and email tools all hold personal information. Your privacy policy and your vendors' data handling have to match what you tell clients.