To rent a home in Canada, applicants routinely hand strangers their SIN, pay stubs, bank statements and a full credit report — the exact bundle that fuels the country's most-reported fraud. Newcomers, who arrive with no Canadian credit file, get locked out entirely. The right question is not "how do we collect more?" but "how do we verify without collecting at all?"
A Canadian rental application is one of the most invasive data grabs an ordinary person voluntarily walks into. To be considered for a unit, applicants routinely disclose government ID, a Social Insurance Number, pay stubs, bank statements, and a full credit report — often before they've even seen the home. In documented Canadian rental scams, victims sent exactly this bundle — photo identification, pay stubs, credit scores and a credit report — to a "landlord" for a unit that did not exist.8
Canada's own privacy regulators say most of this is unnecessary. The Office of the Privacy Commissioner is explicit that a credit check needs only a name, address, and date of birth, and that landlords "should not collect more information than they need."1 Alberta's Information and Privacy Commissioner goes further: a SIN "has no connection to determine suitability of a tenant" and is "not essential for conducting credit checks."4 The data being demanded is largely data that isn't required.
The consequences aren't hypothetical. Identity fraud is now the single most-frequently-reported fraud in Canada, and rental applications are a prime collection point for the precise information — SIN, ID, banking — that makes it possible. Handing that to a stranger, stored who-knows-how, is the risk hiding inside every application.
Three numbers define the stakes: the fraud that over-collection feeds, the newcomers shut out for lack of a Canadian credit file, and how many arrive each year.
Over-disclosure also fuels discrimination: a paired-testing audit of 1,300+ tests found newcomers in Toronto face up to 11× as much rental-housing discrimination as non-newcomers.6 The more an applicant must reveal up front, the wider the surface for bias.
Regulators, the law, and the cryptography all converge on the same principle — verify the claim, don't collect the file. What's missing is a product that actually does it.
The federal OPC and provincial commissioners (BC, Alberta, Québec) publish landlord-tenant guidance urging data minimization, that private organizations "not request SIN numbers," and that applicant data not be "retained indefinitely."2
The consensus is settled — collect less, keep it briefly, verify only what's needed.
Renting residential accommodation is a "commercial activity" under PIPEDA, so every landlord collecting SIN and bank data is a data controller with consent and purpose-limitation duties; BC, Alberta and Québec apply substantially similar laws.3
The exposure sits with whoever holds the data — and today that's a stranger with a spreadsheet.
A foreign credit history doesn't carry over to Canada, so newcomers arrive with a "thin file" and can't pass a standard credit check10 — even when they're demonstrably able to pay. Lack of Canadian credit is then used to justify demands like months of rent in advance.
The screening system fails the very people the housing market needs.
Zero-knowledge proofs let a person prove an eligibility predicate — "income ≥ 3× rent," "no prior evictions" — without revealing the underlying pay stub, SIN, or credit file.11 Verification requires only the cryptographic evidence, not the documents.
The capability exists. It just hasn't reached the rental application yet.
Regulators say minimize, the law imposes liability, and the cryptography to verify-without-disclosing is proven. Yet the default rental application still asks for everything — because nothing on the market closes the loop between "prove you qualify" and "don't hand over your identity."
Propty is agentic rental infrastructure for Ontario: an AI leasing agent that runs a tenancy end to end — screening an applicant, matching a room, drafting the RTA-compliant lease, and standing behind the rent. The privacy shift is in how it screens. Instead of demanding raw documents, the agent is built to accept eligibility proofs: an applicant proves the predicate a landlord actually needs — sufficient income, clean rental history — without surrendering the pay stub, SIN, or full credit report behind it.
That directly answers the gap. It aligns with what regulators already ask for — minimize collection, verify only what's needed — and it opens a path for credit-invisible newcomers, who can prove reliability from documents they already hold rather than being rejected for lacking a Canadian file. Because the sensitive file never has to change hands, there's no honeypot to breach. And by reporting on-time rent to Equifax and TransUnion, the agent lets a newcomer build the Canadian credit history the old system demanded up front.
See how the Propty agent verifies eligibility, houses newcomers with no Canadian credit file, and builds their credit — protecting both sides of the lease.