“The FSCO Bulletin is silent whether existing data may be retained; presumably, this will be within the purview of the Privacy Commissioner. Existing programs in the US are clear that the insurer “will retain information collected or derived from the device indefinitely”.3 Canadian programs are vague, and appear to contemplate that the insurer (the FSCO-regulated entity) won’t keep the data or personal information, but that the (unregulated) third party service provider might.4″