The current state of data sharing with private sector third parties is characterized by fragmentation and inconsistency. While established pathways exist for research partnerships, such as those governed by Research Ethics Board approval. No formal mechanism has been developed to handle arms-length commercial requests. As a result, decision-making tends to be ad hoc, slow, and unstandardized, relying heavily on case-by-case legal and privacy reviews alongside individual judgment calls. This gap is becoming increasingly untenable as the volume of external requests for data access, particularly those driven by AI and advanced analytics, continues to grow.