Investigations into businesses
The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).
The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.
For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.
For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.
Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.
Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].
PIPEDA findings: Financial institution discloses too much information in response to production order
PIPEDA findings: Company’s disclosure of information about a debt owed is not covered under exemption to consent
PIPEDA findings: Online marketplace needs consent from members before contacting them to join advocacy network
PIPEDA findings: Telecom company responsible for erroneous debt collection calls
PIPEDA findings: Hotel chain alerts its clients about “special offer” telephone scam
PIPEDA findings: OPC complaint prompts telecom’s fraud investigation
Financial institution originally misuses confidential commercial information exemption to withhold personal information
PIPEDA findings: Financial institution originally misuses confidential commercial information exemption to withhold personal information
PIPEDA findings: Reasons for retaining customer credit card data explained
Showing items 21 through 30 of 154.
- Date modified: