Investigations into businesses
The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).
The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.
For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.
For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.
Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.
Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].
Investigation into Aylo (formerly MindGeek)’s Compliance with PIPEDA
...In particular, on December 2, 2020, the New York Times published an opinion piece, “The Children... that MindGeek allowed the upload of child sexual abuse material (“CSAM”) and non-consensual...
Investigation into CoreFour Inc.’s compliance with PIPEDA
...and its direct relationship with students and parents, including the complainant and his children... The respondent collects and retains significant personal information of children such as student names, dates... is predominantly about individuals that comprise a vulnerable group: from young children attending...
Joint investigation of Clearview AI, Inc. by the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, the Information and Privacy Commissioner for British Columbia, and the Information Privacy Commissioner of Alberta
...identifiers, including those of a vast number of individuals in Canada, including children. Clearview..., armed robbery and child sexual exploitation to terrorism, major narcotics trafficking and multi-million... and indiscriminate scraping of images from millions of individuals across Canada, including children, amongst over 3...
Dell improves security and complaint handling practices following breaches and OPC Investigation
...). The individual, posing as a Dell employee, indicated that her computer contained child pornography...
Credit reporting agency is authorized to rely on exemption to consent in disclosing credit information to Statistics Canada
...a debt for an unpaid student loan that he had obtained through the Government of Canada 24 years... his outstanding student loan debt. The respondent contended that section 17 of the Statistics Act imposes... for unpaid students loans. We note that this matter relates more directly to the actions of Statistics...
Investigation into Equifax Inc. and Equifax Canada Co.’s compliance with PIPEDA in light of the 2017 breach of personal information
...security standardFootnote 12 (provided by EY CertifyPoint, an Ernst & Young company). In our view...
Microsoft to obtain opt-in consent, enhance transparency for Windows 10 privacy settings
PIPEDA Report of Findings: Microsoft to obtain opt-in consent, enhance transparency for Windows 10 privacy settings
Company’s re-use of millions of Canadian Facebook user profiles violated privacy law
PIPEDA Report of Findings: Company’s re-use of millions of Canadian Facebook user profiles violated privacy law
...me look like a child. Our Office confirmed, based on a search of Facebook, that the subject...
Operator of website that shamed debtors for profit takes down website after OPC takes the matter to Federal Court
PIPEDA Report of Findings: Operator of website that shamed debtors for profit takes down website after OPC takes the matter to Federal Court
...between the website, and the child-support enforcement programs run by the Ontario and Alberta governments...
Showing items 1 through 10 of 19.
- Date modified: