Rights are about being compelled to do something, mostly by the government.

In theory, if a business tells you that they're going to share your IP address and you don't like it, you can take your business elsewhere. In practice it's not that simple, of course. There are too many huge companies who have monopolies or near monopolies, restricting your choice. They also often don't disclose what they're doing with your data. Also, often when they ask for consent, the consent is buried in some 400 page click-wrap agreement that you can't realistically be expected to read before agreeing to.

Canada needs better privacy laws. Currently Europe is leading the way there, but Canada's more aligned with the US, where corporate influence is much stronger.