It is easy to assume that once a deal closes and the file goes in a drawer, your obligations to that client wind down with it. Two regulators say the opposite about the professional duty of confidentiality — it does not expire at closing, or ever. What actually changes after closing is not whether you must keep a former client’s confidences, but how a completely different law, one about personal information rather than professional duty, tells you what to do with the paper the file is written on.
Key takeaways
RECO Bulletin 2.5 is explicit: “The duty of confidentiality is ongoing. Even after the client relationship ends, brokerages and agents must continue to protect and safeguard clients’ information.” (RECO Bulletin 2.5) Nothing in the transaction — not the closing date, not the final payout of commission, not the client moving on to a new agent for their next purchase — ends the duty. British Columbia’s regulator states the same rule even more starkly, ranking it above every other agency duty: “Of all the agency obligations and duties owed to a client, confidentiality is the only one that extends forever.” (BCFSA Agency Guidelines)
Under brokerage representation, a client’s file and confidential information is available to every agent registered with the brokerage — “the knowledge of a specific agent about a client is considered to be available to all of the other agents.” Under designated representation, only the named designated representative may access it, and that representative must not disclose it “to any other agent employed by the same brokerage or any other person, unless the disclosure is authorized by the client or required by law.” A team routinely sharing client information, RECO notes, means every team member must actually be named as a designated representative in the agreement — sharing informally does not exempt anyone from the rule. (RECO Bulletin 2.5) That structural split does not dissolve at closing either — a former designated-representation client’s file is still walled off from other agents at the same brokerage after the deal is done.
BCFSA walks through the exact scenario that makes this concrete. You previously listed a home and, in the course of that representation, learned your seller client was under financial pressure. The listing expired and they relisted with a different brokerage. Months later, you pick up a buyer client interested in that same property. Because your duty of confidentiality to the former seller is still running, “you are unable to provide your current buyer client with information about the seller’s financial position that could help them get the property at a potentially lower price” — even though doing so would plainly help the client sitting in front of you today. (BCFSA Agency Guidelines) Where that kind of conflict surfaces, the obligation is to disclose it promptly to the current client and, in some cases, to step back from representing them further on that specific property. The only way around the confidentiality wall is the former client’s own written consent to disclose — nothing else authorizes it.
Confidentiality as a professional duty and personal information as a compliance category are not the same thing, and they point in different directions after closing. The federal Personal Information Protection and Electronic Documents Act sets out its own Fair Information Principle 5, “Limiting Use, Disclosure, and Retention,” which requires an organization to “Keep personal information only as long as it is needed” for the purposes it was collected, to “Institute maximum and minimum retention periods,” and to “Dispose of personal information that does not have a specific purpose or no longer fulfills its intended purpose,” in a way that prevents a breach. (PIPEDA Fair Information Principle 5) So the professional duty says: keep the confidence indefinitely. The privacy law says: do not keep the personal information itself indefinitely, only as long as it serves a real purpose. Both are true at once, and reconciling them means keeping enough of the file to answer a future complaint or dispute — the evidence RECO’s own complaints process asks for, such as the representation agreement and correspondence — without hoarding personal data that no longer serves any purpose.
In practice this argues against both extremes. Purging a closed client’s file the day after closing removes the evidence you would need if a complaint surfaced years later, since RECO’s own discipline process considers a registrant’s history and pattern of conduct going back well beyond any one transaction. But treating a CRM as a permanent, ever-growing archive of every confidence a former client ever shared — motivations, financial pressure, family circumstances — runs against PIPEDA’s retention principle once that information no longer serves the purpose it was collected for. The confidentiality duty tells you never to disclose it; the retention principle tells you not to keep collecting reasons to have it sitting there in the first place. A separately confidential business-information framework outside real estate makes a related point in general terms: protectable confidential information depends on genuine confidentiality practice — limiting access, using access controls, treating it as commercially sensitive — not simply on time passing. (general Ontario confidential-information framework)
Related: see what to actually keep on file and why, what survives when a client relationship ends, and the glossary entry on informed consent, which is the only way to lawfully disclose what confidentiality otherwise locks down.
Yes, but only in writing. RECO Bulletin 2.5 states that confidential client information cannot be disclosed to a third party without the client’s written consent, except where disclosure is otherwise required by law — a verbal release is not enough.
It means you cannot disclose the client’s confidential information — motivations, financial position, negotiating position — without written consent. A testimonial the former client actually reviewed and consented to is a different thing from you independently describing what you learned about their situation.
Those are separate statutory retention duties with their own fixed periods and start dates, running alongside — not instead of — both the confidentiality duty and PIPEDA’s general retention principle. Meeting a specific statutory retention period does not relax the confidentiality duty on what you keep.
A short conversation is enough to map your confidentiality duty against what your CRM is actually holding onto.
