Language selection

Search

Investigations into businesses

The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.

For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.

For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.

Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.

Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].

Sort by date / Sort by relevance
PIPEDA Report of Findings #2020-003

Dell improves security and complaint handling practices following breaches and OPC Investigation

PIPEDA Report of Findings: Dell improves security and complaint handling practices following breaches and OPC Investigation

...child pornography and that he would need $100 in order to clean it. He also requested remote access...

Date of findings:
PIPEDA Report of Findings #2019-007

Credit reporting agency is authorized to rely on exemption to consent in disclosing credit information to Statistics Canada

PIPEDA Report of Findings: Credit reporting agency is authorized to rely on exemption to consent in disclosing credit information to Statistics Canada

...for the purpose of recovering a debt for an unpaid student loan that he had obtained through the Government... of collecting his outstanding student loan debt. The respondent contended that section 17... a debt he owed for unpaid students loans. We note that this matter relates more directly...

Date of findings:
PIPEDA Report of Findings #2019-004

Joint investigation of AggregateIQ Data Services Ltd. by the Privacy Commissioner of Canada and the Information and Privacy Commissioner for British Columbia

PIPEDA Report of Findings: Joint investigation of AggregateIQ Data Services Ltd. by the Privacy Commissioner of Canada and the Information and Privacy Commissioner for British Columbia

Date of findings:
PIPEDA Report of Findings #2019-001

Investigation into Equifax Inc. and Equifax Canada Co.’s compliance with PIPEDA in light of the 2017 breach of personal information

PIPEDA Report of Findings: Investigation into Equifax Inc. and Equifax Canada Co.’s compliance with PIPEDA in light of the 2017 breach of personal information

...& Young company). In our view, it would generally be reasonable, for the purpose of assessing...

Date of findings:
PIPEDA Report of Findings #2018-004

Microsoft to obtain opt-in consent, enhance transparency for Windows 10 privacy settings

PIPEDA Report of Findings: Microsoft to obtain opt-in consent, enhance transparency for Windows 10 privacy settings

Date of findings:
PIPEDA Report of Findings #2018-002

Company’s re-use of millions of Canadian Facebook user profiles violated privacy law

PIPEDA Report of Findings: Company’s re-use of millions of Canadian Facebook user profiles violated privacy law

...me look like a child. Our Office confirmed, based on a search of Facebook, that the subject...

Date of findings:
PIPEDA Report of Findings #2017-007

Operator of website that shamed debtors for profit takes down website after OPC takes the matter to Federal Court

PIPEDA Report of Findings: Operator of website that shamed debtors for profit takes down website after OPC takes the matter to Federal Court

...between the website, and the child-support enforcement programs run by the Ontario and Alberta governments...

Date of findings:
PIPEDA Report of Findings #2018-001

Connected toy manufacturer improves safeguards to adequately protect children’s information

PIPEDA Report of Findings: Connected toy manufacturer improves safeguards to adequately protect children’s information

...for children); and (iii) Kid Connect (an app that allows children and parents to exchange voice... of over 316,000 Canadian children (e.g., name, gender, DOB, profile pictures, voice recordings and logs... parents associated with those children (e.g., name, email, IP and mailing address). The affected...

Date of findings:
PIPEDA Report of Findings #2015-016

Global RESP Corporation accountable for actions of sales representative for the use of patients' personal information purchased from a Rouge Valley Hospital employee

PIPEDA Report of Findings: Global RESP Corporation accountable for actions of sales representative for the use of patients' personal information purchased from a Rouge Valley Hospital employee

...Savings Plan (“RESP”) for her child. Summary of Investigation Timeline Approximately two months after giving birth to a child at Rouge Valley in October 2013, the complainant received... the complainant’s child in a Global Education Trust, a form of RESP. Additional information...

Date of findings:
PIPEDA Report of Findings #2016-005

Joint investigation of Ashley Madison by the Privacy Commissioner of Canada and the Australian Privacy Commissioner/Acting Australian Information Commissioner

PIPEDA Report of Findings: Joint investigation of Ashley Madison by the Privacy Commissioner of Canada and the Australian Privacy Commissioner/Acting Australian Information Commissioner

...at people seeking to participate in an affair; Cougar Life, targeted at mature women seeking younger men (and vice versa); Established Men, targeted at mature men seeking younger women (and vice versa...

Date of findings:

Showing items 1 through 10 of 53.

Filter these results

Search by key word or choose from the filter options below to narrow the results.


Dispositions

Complaint Types

Sectors

Topics

Principles

Date of Findings


Report a problem or mistake on this page
Error 1: No selection was made. You must choose at least 1 answer.
Please select all that apply (required):

Note

Date modified: