According to the Guardian, the data firm AggregateIQ contravened to Canadian privacy laws as part of its work leading pro-Brexit group in the UK and a number of political campaigns in the United-States. The Canadian data protection authority indicated that the company has failed to ensure it had the authority to disclose UK voter information. In a report, the Canadian authority also detailed that the company failed to obtain adequate consent for use and disclosure of the personal information of voters, which was used to produce micro-targeted political ads. According to CBC, AggregateIQ  "failed to take reasonable security measures" to protect personal information it collected in a database containing the names and contact information of 35 million people.