Investigations into businesses
The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).
The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.
For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.
For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.
Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.
PIPEDA Report of Findings: Identification machines and video cameras in bars examined
PIPEDA Report of Findings: Fraud detection not an acceptable reason to collect driver’s licence numbers for store memberships
Report of an Investigation into the Security, Collection and Retention of Personal Information: TJX Companies Inc. /Winners Merchant International L.P.
PIPEDA Case Summary: Registrar collects personal information to combat domain name hijacking
PIPEDA Case Summary: Identification requirements for cell phone services
PIPEDA Case Summary: Bank removed customer's SIN from some, but not all, of its records
PIPEDA Case Summary: Railway's reasons for collecting personal information deemed appropriate; safeguards, adequate
Individual complains that bank used personal information for purpose other than that for which it was collected
PIPEDA Case Summary: Individual complains that bank used personal information for purpose other than that for which it was collected
PIPEDA Case Summary: Commissioner considers jurisdiction over use of personal information by bank subsidiary
Showing items 1 through 10 of 10.
- Date modified: