Investigations into businesses
The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).
The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.
For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.
For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.
Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.
Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].
Misidentification and lack of access to personal information leads to mistaken four-year debt pursuit
Early resolved case summary #2015-04: Misidentification and lack of access to personal information leads to mistaken four-year debt pursuit
Office building tenant reconsiders placement of video surveillance cameras
Early resolved case summary #2015-03: Office building tenant reconsiders placement of video surveillance cameras
Investigation into a telecommunications company’s response to an individual’s request for access to information about disclosures of her personal information to other parties
PIPEDA Case Summary: Investigation into a telecommunications company’s response to an individual’s request for access to information about disclosures of her personal information to other parties
Trucking company inappropriately disclosed employee’s drug test results to workers’ compensation board
PIPEDA Case Summary: Trucking company inappropriately disclosed employee’s drug test results to workers’ compensation board
An organization's privacy policy and procedures must be implemented effectively
PIPEDA Case Summary: An organization's privacy policy and procedures must be implemented effectively
An insurance company’s internal ombudsman office is not a “formal dispute resolution process” under PIPEDA
PIPEDA Report of Findings: An insurance company’s internal ombudsman office is not a “formal dispute resolution process” under PIPEDA
Pension and benefit provider agrees to revamp authentication and address-change procedures after misdirected mailings
PIPEDA Case Summary: Pension and benefit provider agrees to revamp authentication and address-change procedures after misdirected mailings
Roofing company takes measures to ensure sub-contractors follow its privacy policy
PIPEDA Case Summary: Roofing company takes measures to ensure sub-contractors follow its privacy policy
Retailer shares customer’s in-store behaviour with the customer’s employer
PIPEDA Case Summary: Retailer shares customer’s in-store behaviour with the customer’s employer
Showing items 71 through 80 of 158.
- Date modified: