Investigations into businesses
The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).
The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.
For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.
For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.
Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.
Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].
Financial institution discloses too much information in response to production order
PIPEDA findings: Financial institution discloses too much information in response to production order
Telecom company responsible for erroneous debt collection calls
PIPEDA findings: Telecom company responsible for erroneous debt collection calls
Facebook agrees to stop using non-users’ personal information in users’ address books
PIPEDA Report of Findings: Facebook agrees to stop using non-users’ personal information in users’ address books
Operator of website that shamed debtors for profit takes down website after OPC takes the matter to Federal Court
PIPEDA Report of Findings: Operator of website that shamed debtors for profit takes down website after OPC takes the matter to Federal Court
Insurance company required to delete individual’s personal information after individual withdraws consent
PIPEDA Case Summary: Insurance company required to delete individual’s personal information after individual withdraws consent
Manager snoops on employee’s personal bank account after employee calls in sick
Early resolved case summary #2015-06: Manager snoops on employee’s personal bank account after employee calls in sick
Anti-virus service provider steps up safeguards after customer personal information fraudulently used by someone posing as an employee
Early resolved case summary #2015-05: Anti-virus service provider steps up safeguards after customer personal information fraudulently used by someone posing as employee
Trucking company inappropriately disclosed employee’s drug test results to workers’ compensation board
PIPEDA Case Summary: Trucking company inappropriately disclosed employee’s drug test results to workers’ compensation board
Showing items 1 through 10 of 17.
- Date modified: