Police need a warrant, but websites and regular businesses can collect and link a user's IP to their personal details and share it with anyone, with no court intervention required.
How does that make any sense?
Maybe police will find a way around this loophole by purchasing collected data as an "advertising partner."
Wasn't there something like this already? Swear I read couple months ago something about a police force buying data off data brokers to get around protections in place.
Rights are about being compelled to do something, mostly by the government.
In theory, if a business tells you that they're going to share your IP address and you don't like it, you can take your business elsewhere. In practice it's not that simple, of course. There are too many huge companies who have monopolies or near monopolies, restricting your choice. They also often don't disclose what they're doing with your data. Also, often when they ask for consent, the consent is buried in some 400 page click-wrap agreement that you can't realistically be expected to read before agreeing to.
Canada needs better privacy laws. Currently Europe is leading the way there, but Canada's more aligned with the US, where corporate influence is much stronger.
They'll still have all the information. They just need a warrant if they want to admit they have the information. Computers are fundamentally insecure by design. Unless there is some sort of major overhaul in the basic structure of computing technology, we need to be a LOT more cautious about how we integrate computer technology into any sort of potentially sensitive area.