Investigations into businesses
The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).
The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.
For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.
For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.
Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.
Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].
Employee training a key factor in effectively satisfying customers’ requests about an organization’s personal information handling practices
Early resolved case summary: Employee training a key factor in effectively satisfying customers’ requests about an organization’s personal information handling practices
First Nation develops a privacy policy following allegations of lost doctor’s notes
Early resolved case summary: Organization’s technical glitch results in the disclosure of a client’s personal information to another client
Insurance company required to delete individual’s personal information after individual withdraws consent
PIPEDA Case Summary: Insurance company required to delete individual’s personal information after individual withdraws consent
Using SIN for identity verification cannot be a condition of service
PIPEDA Case Summary: Using SIN for identity verification cannot be a condition of service
OPC discontinues additional complaints against Globe24h.com following investigation into same privacy issues
PIPEDA Discontinued Case Summary: OPC discontinues additional complaints against Globe24h.com following investigation into same privacy issues
Manager snoops on employee’s personal bank account after employee calls in sick
Early resolved case summary #2015-06: Manager snoops on employee’s personal bank account after employee calls in sick
Access to personal information held by insurance company facilitated through the early resolution process
Early resolved case summary: Access to personal information held by insurance company facilitated through the early resolution process
Connected toy manufacturer improves safeguards to adequately protect children’s information
PIPEDA Report of Findings: Connected toy manufacturer improves safeguards to adequately protect children’s information
Organization’s technical glitch results in the disclosure of a client’s personal information to another client
Early resolved case summary #2016-02: Organization’s technical glitch results in the disclosure of a client’s personal information to another client
Consent provided extends to third-party doctor hired to evaluate accident insurance claim
PIPEDA Case Summary: Consent provided extends to third-party doctor hired to evaluate accident insurance claim
Showing items 51 through 60 of 158.
- Date modified: