Canadians generally think that buying and selling their information is illegal so it's not happening, which is why this is news.

They're right that it's illegal but definitely wrong about it not happening.

The damage to privacy from this is likely much less then the average person realizes.

(an American living in Canada's perspective)