Investigations into businesses
The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).
The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.
For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.
For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.
Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.
Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].
Joint Investigation of OpenAI OpCo, LLC
...in Google Inc. v. Equustek Solutions Inc. that “[t]he Internet has no borders — its natural habitat... Report of Findings related to Google search results.Footnote 45 In that report, drawing on Supreme Court...
Investigation and recommendations concerning Google search engine service’s compliance with its obligations under PIPEDA
...Investigation and recommendations concerning Google search engine service’s compliance with its obligations under PIPEDA PIPEDA Findings #2025-002: Investigation and recommendations concerning Google... and recommendations concerning Google search engine service’s compliance with its obligations under PIPEDA PIPEDA...
Joint investigation into a data breach at 23andMe by the Privacy Commissioner of Canada and the UK Information Commissioner
...application (such as Google Authenticator) and synchronize a verification code between their account... to use an existing account with a trusted service provider (for example, Apple or Google) to access...; optional application-based MFA or optional Google or Apple SSO; Web Application Firewall (WAF...
Investigation into Aylo (formerly MindGeek)’s Compliance with PIPEDA
..., a search of the Complainant’s full name on an external search engine such as Google led to a webpage...
Investigation into CoreFour Inc.’s compliance with PIPEDA
...an issue with how Edsby uploads data used by its clients, from email and storage solutions such as Google Workspace (formerly Google G Suite) and Microsoft Office 365. Where clients authorize this, the data...
Joint investigation of Clearview AI, Inc. by the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, the Information and Privacy Commissioner for British Columbia, and the Information Privacy Commissioner of Alberta
...that the person suffers when a Google search of his or her name is performed.” Clearview...
Dell improves security and complaint handling practices following breaches and OPC Investigation
...of a certain company, usually referencing well-known technology companies such as Microsoft, Google or Apple...
411Numbers ceases practice of removing information for a fee
...from $0.99 to $14.99. It claimed that the fee was in relation to de-indexing the information from Google search results only (i.e., via a request to Google to de-index the page from its search results... the de-indexing process (i.e. the extent to which 411Numbers had to deal with Google). 411Numbers...
Joint investigation of AggregateIQ Data Services Ltd. by the Privacy Commissioner of Canada and the Information and Privacy Commissioner for British Columbia
..., as described above under section 4.1. AIQ also used Google to target advertisements at general demographic groups...
Showing items 1 through 10 of 17.
- Date modified: