Language selection

Search

Investigations into businesses

The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.

For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.

For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.

Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.

Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].

Sort by date / Sort by relevance
PIPEDA Report of Findings #2026-002

Overview of the Joint Investigation of OpenAI OpCo, LLC

...information (including that of children), some of which will be sensitive (e.g., political views, health...

Date of findings:
PIPEDA Report of Findings #2026-002

Joint Investigation of OpenAI OpCo, LLC

...and reputation (including youth and other vulnerable groups), or assist malicious actors in conducting... topics including about other individuals, and information relating to children. Legitimate...

Date of findings:
PIPEDA Report of Findings #2025-003

Joint investigation of TikTok Pte. Ltd. by the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, the Office of the Information and Privacy Commissioner for British Columbia, and the Office of the Information and Privacy Commissioner of Alberta

...the potential harms to children and youth associated with targeted advertising and social media content... that there are risks associated with targeting children and youth. As numerous experts have noted, there are other potential general harms to children and youth resulting from targeted advertising, including...

Date of findings:
PIPEDA Report of Findings #2025-002

Investigation and recommendations concerning Google search engine service’s compliance with its obligations under PIPEDA

..., although circumstances when it will do so include: search results that lead to images of child sexual abuse..., in relation to an individual’s publication of prohibited content when they were a student; news articles...

Date of findings:
PIPEDA findings #2024-001

Investigation into Aylo (formerly MindGeek)’s Compliance with PIPEDA

...activities. In particular, on December 2, 2020, the New York Times published an opinion piece, “The Children... that MindGeek allowed the upload of child sexual abuse material (“CSAM”) and non-consensual...

PIPEDA findings #2021-002

Investigation into CoreFour Inc.’s compliance with PIPEDA

...and its direct relationship with students and parents, including the complainant and his children... The respondent collects and retains significant personal information of children such as student names, dates... within Edsby is predominantly about individuals that comprise a vulnerable group: from young children attending...

Date of findings:
PIPEDA findings #2021-001

Joint investigation of Clearview AI, Inc. by the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, the Information and Privacy Commissioner for British Columbia, and the Information Privacy Commissioner of Alberta

...identifiers, including those of a vast number of individuals in Canada, including children. Clearview..., armed robbery and child sexual exploitation to terrorism, major narcotics trafficking and multi-million... and indiscriminate scraping of images from millions of individuals across Canada, including children, amongst over 3...

Date of findings:
PIPEDA findings #2020-003

Dell improves security and complaint handling practices following breaches and OPC Investigation

...). The individual, posing as a Dell employee, indicated that her computer contained child pornography...

Date of findings:
PIPEDA findings #2019-007

Credit reporting agency is authorized to rely on exemption to consent in disclosing credit information to Statistics Canada

...a debt for an unpaid student loan that he had obtained through the Government of Canada 24 years... his outstanding student loan debt. The respondent contended that section 17 of the Statistics Act imposes... for unpaid students loans. We note that this matter relates more directly to the actions of Statistics...

Date of findings:

Showing items 1 through 10 of 25.

Filter these results

Search by key word or choose from the filter options below to narrow the results.


Dispositions

Complaint Types

Sectors

Topics

Principles

Date of Findings


Date modified: