A research paper commissioned by the Office of the Privacy Commissioner of Canada concludes:
The current reality is that the parties are managing vast databases within which a variety of sensitive personal information from disparate sources is processed. For the most part, individuals have no legal rights to learn what information is contained therein, to access and correct those data, to remove themselves from the systems, or to restrict the collection, use and disclosure of their personal data. For the most part, parties have no legal obligations to keep that information secure, to only retain it for as long as necessary, and to control who has access to it.
The entire March 2012 paper, Canadian Federal Political Parties and Personal Privacy Protection: A Comparative Analysis, can be viewed at: