Investigations into businesses

Filter these results

  • Complaint Types

    • Retention and Disposal

Search by key word or choose from the filter options below to narrow the results.


Dispositions

Complaint Types

Sectors

Topics

Principles

Date of Findings


The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.

For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.

For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.

Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.

PIPEDA Report of Findings #2013-001

Investigation into the personal information handling practices of WhatsApp Inc.

PIPEDA Report of Findings: Investigation into the personal information handling practices of WhatsApp Inc.

Date of findings:
PIPEDA Report of Findings #2011-004

A credit union in Ontario should have obtained consent for credit check on spouse

PIPEDA Report of Findings: A credit union in Ontario should have obtained consent for credit check on spouse

Date of findings:
PIPEDA Case Summary #2010-003

Poor response to customer’s access requests causes unnecessary deletion of his personal information

PIPEDA Report of Findings: Poor response to customer’s access requests causes unnecessary deletion of his personal information

Date of findings:
PIPEDA Report of Findings #2009-008

Report of Findings: CIPPIC v. Facebook Inc.

PIPEDA Report of Findings: Complaint Filed by the Canadian Internet Policy and Public Interest Clinic (CIPPIC) against Facebook Inc. under PIPEDA.

Date of findings:
PIPEDA Case Summary #2007-377

Law firm's shoddy privacy practices result in missing personal information; request for access denied

PIPEDA Case Summary: Law firm’s shoddy privacy practices result in missing personal information; request for access denied

Date of findings:
PIPEDA Case Summary #2008-388

Ticketmaster Canada Limited revised its policies and practices with respect to PIPEDA to protect customers' personal information

PIPEDA Case Summary: Ticketmaster Canada Limited revised its policies and practices with respect to PIPEDA to protect customers’ personal information

Date of findings:
PIPEDA Report of Findings #2007-389

TJX Companies Inc. /Winners Merchant International L.P.

Report of an Investigation into the Security, Collection and Retention of Personal Information: TJX Companies Inc. /Winners Merchant International L.P.

Date of findings:
PIPEDA Case Summary #2006-356

Customer's banking personal information found in a recycling bin

PIPEDA Case Summary: Customer’s banking personal information found in a recycling bin

Date of findings:
PIPEDA Case Summary #2006-326

Credit bureau sets retention period for positive information

PIPEDA Case Summary: Credit bureau sets retention period for positive information

Date of findings:

Showing items 11 through 20 of 33.

Date modified: