It's up to each verifier (e.g. phone app developers) to decide which issuers to trust but there's a list: https://www.commontrustnetwork.org/verifier-list.
> "The Act protects an individual's privacy by setting out provisions related to the collection, retention, accuracy, disposal, use and disclosure of personal information."
and the privacy act [1]
> "(a) information relating to the race, national or ethnic origin, colour, religion, age or marital status of the individual,
> (b) information relating to the education or the medical, criminal or employment history of the individual or information relating to financial transactions in which the individual has been involved,"
Hopefully they adjust accordingly.
[0]: https://www.canada.ca/en/health-canada/corporate/about-healt...
[1]: https://laws-lois.justice.gc.ca/eng/acts/P-21/FullText.html