CMHC in a mammoth data scoop compiled personal financial records on nearly nine million mortgage holders, according to Access To Information files. Data obtained without borrowers’ informed consent included personal income, municipal addresses, credit scores and household debts even for homeowners who were not CMHC customers: “No, we shouldn’t need a privacy impact assessment.”