Data management must be carried out in accordance with the Tri-Council Policy Statement (TCPS2), which provides guidance on aspects of human research data management, such as consent, privacy and confidentiality, Aboriginal rights, use of secondary data and data linkage.
All nominative information, including a combination of information, about a person or that could allow a person to be identified must be treated as confidential and may not be disclosed without the person's consent. In addition, information of a sensitive nature for security, commercial or strategic issues may be declared confidential. Particular attention must be paid to the handling and storage of such data.