Protecting confidentiality during a pharmacy sale

A staged disclosure plan protects the business while giving qualified buyers enough information to investigate.

Educational owner resource. Read the cited sources and obtain advice for your circumstances.

Agree a disclosure plan before telling the story

Confidentiality is an operating discipline throughout the sale process. Decide who knows about the possible transaction, who speaks for the owner and who can authorize each new disclosure. Keep a short record of recipients and materials. This helps you answer an essential question later: who has which version of the information?

Begin with a carefully anonymized summary where possible. Even without a pharmacy name, a unique combination of town, services, prescriber relationships or revenue may reveal identity. Ask whether a detail is necessary at that stage. The goal is a useful conversation that does not expose more than the recipient needs.

Move from anonymous information to controlled diligence

Screen actual buyer interest through an appropriate process before releasing identity or detailed records. Use a confidentiality agreement reviewed for the transaction, named-user access and an organized data-room index. Define permitted use, onward sharing and handling when interest ends. Watermarks and access logs can support the process, but neither prevents every disclosure.

Prepare lawful aggregate summaries for early discussions. Redact bank account numbers, staff identifiers and unrelated personal information from files when appropriate. Do not send patient names, prescription records, health information or system credentials into the public website or its lead forms. A buyer’s request is not automatically a reason to provide unrestricted access.

Understand the legal limits of an NDA

Federal PIPEDA section 7.2 permits certain business-transaction disclosures without consent only if specified conditions are met. Requirements include necessity, appropriate agreements and safeguards; completed transactions have further conditions. Its application and provincial health-information rules need qualified review. Department of Justice Canada An NDA alone does not make a patient-level export permissible.

For the resource centre itself, the OPC’s meaningful-consent guidance supports giving people understandable information about collection, purposes and disclosures. Office of the Privacy Commissioner of Canada Marketing permission is a separate decision from asking for advice. CASL generally requires a valid consent basis, identification and unsubscribe mechanisms for commercial electronic messages; CRTC guidance says unsubscribe requests must be honoured within 10 business days. Canadian Radio-television and Telecommunications Commission Do not treat an inquiry as unlimited marketing permission.

Plan communications and the end of access

Decide with advisors when staff, suppliers, landlords and other stakeholders need to be informed. The sale timetable and the need for consents may affect the sequence. Prepare factual communications about service continuity rather than promises the owner cannot control. Keep one responsible contact for questions so conflicting messages do not spread.

When a buyer withdraws, remove access and follow the applicable agreement’s return or destruction process. When a transaction completes, address records, permissions and required notices through a documented handover. A controlled process is easier to run when these actions are agreed at the beginning. Use the CIM checklist to establish your information index, then discuss an appropriate disclosure plan privately before sharing sensitive materials.

Continue reading

Pharmacy financial figures: gross profit, gross margin, NOI and EBITDA

Pharmacy share or asset purchase agreement: what sellers should expect

Selling a pharmacy in Canada: what happens from an accepted offer to closing?

Sources and context

CASL Guidance on Implied Consent
General CASL guidance; a specific communication’s consent basis, exceptions and identification requirements need context. No automatic compliance certification.

Guidelines for obtaining meaningful consent
Meaningful-consent guidance, not a pharmacy acquisition disclosure permission or a substitute for applicable provincial health/privacy rules.

PIPEDA, section 7.2: business transactions
Conditional federal business-transaction provisions. Applicability and provincial health-information requirements must be reviewed; an NDA alone does not satisfy every condition. Accessed 2026-10-14.

Browse all articles and exit guides →

Plan your next conversation

Smith & Bederman Advisory Group supports independent Canadian pharmacy owners with sales, acquisitions, valuation and succession planning.

Explore valuation and EBITDA tools · Check exit readiness · Book a confidential consultation

Calculator access, full buyer profiles and downloads are available through the Resource Centre’s access form.