Investigations into businesses
The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).
The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.
For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.
For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.
Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.
Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].
Investigation into the personal information handling practices of “Compu-Finder” (3510395 Canada Inc.)
PIPEDA Report of Findings: Investigation into the personal information handling practices of “Compu-Finder” (3510395 Canada Inc.)
...to be an address devoted to assisting students and faculty at a university report unwanted spam e...
Joint investigation of Clearview AI, Inc. by the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, the Information and Privacy Commissioner for British Columbia, and the Information Privacy Commissioner of Alberta
...identifiers, including those of a vast number of individuals in Canada, including children. Clearview..., armed robbery and child sexual exploitation to terrorism, major narcotics trafficking and multi-million... and indiscriminate scraping of images from millions of individuals across Canada, including children, amongst over 3...
Organization required to mask detailed personal-leave information available to other employees
..., a death in the family, birth of a child and parental leave. In our view, by having this information...
Misdirected faxes containing health information end up in apartment managers' hands
..., and also included information about the patient's children. The evaluation was sent by a medical consultant...
Investigation into Equifax Inc. and Equifax Canada Co.’s compliance with PIPEDA in light of the 2017 breach of personal information
...security standardFootnote 12 (provided by EY CertifyPoint, an Ernst & Young company). In our view...
Operator of website that shamed debtors for profit takes down website after OPC takes the matter to Federal Court
PIPEDA Report of Findings: Operator of website that shamed debtors for profit takes down website after OPC takes the matter to Federal Court
...between the website, and the child-support enforcement programs run by the Ontario and Alberta governments...
Company’s re-use of millions of Canadian Facebook user profiles violated privacy law
PIPEDA Report of Findings: Company’s re-use of millions of Canadian Facebook user profiles violated privacy law
...me look like a child. Our Office confirmed, based on a search of Facebook, that the subject...
Dell improves security and complaint handling practices following breaches and OPC Investigation
...). The individual, posing as a Dell employee, indicated that her computer contained child pornography...
Showing items 11 through 19 of 19.
- Date modified: