Investigations into businesses

Filter these results

Search by key word or choose from the filter options below to narrow the results.


Dispositions

Complaint Types

Sectors

Topics

Principles

Date of Findings


The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.

For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.

For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.

Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.

Sort by date / Sort by relevance
PIPEDA Report of Findings #2018-001

Connected toy manufacturer improves safeguards to adequately protect children’s information

PIPEDA Report of Findings: Connected toy manufacturer improves safeguards to adequately protect children’s information

...for children); and (iii) Kid Connect (an app that allows children and parents to exchange voice... of over 316,000 Canadian children (e.g., name, gender, DOB, profile pictures, voice recordings and logs... parents associated with those children (e.g., name, email, IP and mailing address). The affected...

Date of findings:
PIPEDA Report of Findings #2015-016

Global RESP Corporation accountable for actions of sales representative for the use of patients' personal information purchased from a Rouge Valley Hospital employee

PIPEDA Report of Findings: Global RESP Corporation accountable for actions of sales representative for the use of patients' personal information purchased from a Rouge Valley Hospital employee

...Savings Plan (“RESP”) for her child. Summary of Investigation Timeline Approximately two months after giving birth to a child at Rouge Valley in October 2013, the complainant received... the complainant’s child in a Global Education Trust, a form of RESP. Additional information...

Date of findings:
PIPEDA Report of Findings #2016-005

Joint investigation of Ashley Madison by the Privacy Commissioner of Canada and the Australian Privacy Commissioner/Acting Australian Information Commissioner

PIPEDA Report of Findings: Joint investigation of Ashley Madison by the Privacy Commissioner of Canada and the Australian Privacy Commissioner/Acting Australian Information Commissioner

...at people seeking to participate in an affair; Cougar Life, targeted at mature women seeking younger men (and vice versa); Established Men, targeted at mature men seeking younger women (and vice versa...

Date of findings:
PIPEDA Report of Findings #2016-003

Investigation into the personal information handling practices of “Compu-Finder” (3510395 Canada Inc.)

PIPEDA Report of Findings: Investigation into the personal information handling practices of “Compu-Finder” (3510395 Canada Inc.)

...to be an address devoted to assisting students and faculty at a university report unwanted spam e-mails...

Date of findings:
PIPEDA Report of Findings #2016-002

Property management company agrees to scrap "bad tenant list"

PIPEDA Report of Findings: Property management company agrees to scrap "bad tenant list"

...of Investigation Complainant The complainant is a single parent who has a child with disabilities. She was attempting to find a new rental accommodation that was fully accessible to her child...

Date of findings:
PIPEDA Report of Findings #2010-008

When using video surveillance, security needs must respect privacy requirements

PIPEDA Report of Findings: When using video surveillance, security needs must respect privacy requirements

...were waiting in the building lobby and the two younger nieces began to touch a decorative water...

Date of findings:
Incident Summary #9

Online contest database hacked

..., number of children, email address and contest password (but no financial information). The information...

Date of findings:
PIPEDA Report of Findings #2015-002

Website that generates revenue by republishing Canadian court decisions and allowing them to be indexed by search engines contravened PIPEDA

PIPEDA Report of Findings: Website that generates revenue by republishing Canadian court decisions and allowing them to be indexed by search engines contravened PIPEDA

..., and information about children) and the fact that these decisions were being prominently featured...

Date of findings:
PIPEDA Case Summary #2014-014

Organization required to mask detailed personal-leave information available to other employees

..., a death in the family, birth of a child and parental leave. In our view, by having this information...

Date of findings:
PIPEDA Report of Findings #2015-001

Results of Commissioner Initiated Investigation into Bell’s Relevant Ads Program

PIPEDA Report of Findings: Results of Commissioner Initiated Investigation into Bell’s Relevant Ads Program

...of targeted ads based on sensitive interest categories, like those relating to health or children, Bell...

Date of findings:

Showing items 1 through 10 of 46.

Report a problem or mistake on this page
Please select all that apply (required): Error 1: This field is required.

Note

Date modified: