Language selection

OPC Logo Office of the Privacy Commissioner of Canada

Search

Investigations into businesses

The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.

For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.

For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.

Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.

Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].

PIPEDA Report of Findings #2015-007

Financial institution takes strong remedial measures after insufficient safeguards and unnecessary storage leaves sensitive data vulnerable to breach

PIPEDA Report of Findings: Financial institution takes strong remedial measures after insufficient safeguards and unnecessary storage leaves sensitive data vulnerable to breach

Date of findings:
PIPEDA Report of Findings #2015-006

Investment brokerage not over collecting personal information to open self-directed investment account

PIPEDA Report of Findings: Investment brokerage not over collecting personal information to open self-directed investment account

Date of findings:
Early resolved case summary #9

Equipment store ends practice of photocopying driver’s licences as a condition of renting equipment

Early resolved case summary: Equipment store ends practice of photocopying driver’s licences as a condition of renting equipment

Date of findings:
PIPEDA Case Summary #2014-014

Organization required to mask detailed personal-leave information available to other employees

Date of findings:
PIPEDA Report of Findings #2014-013

Organization could reasonably assume customer's implied consent for disclosure in dispute resolution situation

PIPEDA Report of Findings: Organization could reasonably assume customer's implied consent for disclosure in dispute resolution situation

Date of findings:
Incident Summary #5

Life insurance company employs best practices in responding to mass mailing error that risked exposing personal information

Date of findings:
PIPEDA Report of Findings #2014-012

Investment Firm Justified in its Collection of "Know Your Client" Information

PIPEDA Report of Findings: Investment Firm Justified in its Collection of "Know Your Client" Information

Date of findings:
Declined to Investigate Case Summary #2013-001

Court procedures provided a more appropriate means to address access issues in ongoing litigation between complainant and retailer

Date of findings:
Discontinued Case Summary #2014-004

Complaint discontinued on the basis of bad faith as complainant had released the retailer from liability

PIPEDA Discontinued Case Summary: Complaint discontinued on the basis of bad faith as complainant had released the retailer from liability

Date of findings:
PIPEDA Case Summary #2014-007

Apple called upon to be more open about its collection and use of information for downloads

Date of findings:

Showing items 91 through 100 of 158.

Filter these results

Search by key word or choose from the filter options below to narrow the results.

Dispositions

Complaint Types

Sectors

Topics

Principles

Date of Findings
Date modified: