Handling customer utility data securely and compliantly

If you run a platform, an energy management service, or a reseller business, you are holding other people's consumption data. It is easy to treat that data as neutral numbers on a meter, but it is not. Fine-grained utility data reveals when a home or business is occupied, what equipment runs, and how a customer lives or operates. Treat it as personal information from the first byte, because in Canada the law already does.

Utility data is personal information

In Canada, PIPEDA sets the rules for how private-sector organizations collect, use, and disclose personal information in commercial activity, and a customer's energy consumption history falls squarely inside that definition. Interval data raises the stakes: fine-grained load can be matched against appliance load signatures to infer device use and occupancy patterns, which is why granular meter data deserves stronger handling than a monthly total.

Consent and authorization done right

PIPEDA is built on 10 fair information principles, with consent at the core, and the Privacy Commissioner's guidelines for meaningful consent expect people to understand what is collected, who it is shared with, why, and the risks involved. For utility data specifically, Green Button Connect My Data is opt-in, time-bounded, and revocable by the customer, built on the NAESB REQ.21 standard. Match that model in your own product: scope each authorization narrowly, record it, and honor revocation promptly.

Data minimization and retention

Collect only what the stated purpose needs, and keep it only as long as that purpose lasts. If a service benchmarks monthly cost, it may not need years of 15-minute interval data attached to a named customer. Define retention up front, delete on schedule, and separate identifiers from consumption where the analysis allows it. Minimization is not just good hygiene, it shrinks the blast radius if something goes wrong.

Encryption, access control, and frameworks

Encrypt data in transit and at rest, enforce role-based access so staff see only what their job requires, and log access so you can prove who touched what. Two frameworks anchor most vendor reviews: SOC 2 is built on five trust services criteria (security, availability, processing integrity, confidentiality, and privacy), of which security is always in scope, and ISO 27001 certifies an information security management system against an international standard. The cost of getting this wrong is real: the global average cost of a data breach reached USD 4.88 million in 2024.

A practical checklist for platforms and resellers

• Capture explicit, scoped authorization for each customer and make revocation easy and immediate.
• Minimize collection and set retention limits per data type, not one blanket policy.
• Encrypt in transit and at rest, and manage keys separately from data.
• Enforce role-based access and log every read of customer data.
• Keep a data inventory and lineage so you can answer where any record came from and where it went.
• Align to a recognized framework (SOC 2 or ISO 27001) and map it to PIPEDA obligations.

Data quality is part of trust

Security and accuracy travel together. If you offer Green Button Connect My Data to customers, the same authorization discipline that protects privacy also protects the integrity of what you ingest. And clean, well-governed data is what keeps energy programs defensible, so treating quality as a compliance concern rather than an afterthought pays off in both audits and outcomes.