4. Is there any information (about a borrower/debtor) that a credit provider must not report to a CRA?

A credit provider must not disclose account data about a person's residential mortgage loan (unless that person has defaulted in repayment for a period in excess of 60 days) to a CRA. Also, a credit provider must not disclose non-credit based information such as income, bank deposits, other assets or employment information.