Scotiabank is responsible for your data when it is in Scotiabank’s control. When you authorize a service provider to collect data from Scotiabank, the service provider is responsible for the data that it receives upon initiating access or transfer of your data to its system.