Canada Post investigation – Key Messages

This case highlights another case of how people’s personal data is being used by organizations without their knowledge.

In today’s world, privacy touches almost every aspect of our lives. We have reached a point where many of our daily activities are raising privacy issues – socializing online; using mobile apps; going to the checkout counter at a store; and, as we saw in this case, getting packages delivered.

Canadians should not have to choose between participating fully in society and protecting their fundamental privacy rights.

This is why keeping up with, and staying ahead of the ways that technological advancements are impacting people’s lives, and, as a result, their personal privacy is a key priority guiding the work of my Office.

Through the investigation of this Canada Post program, we discovered that the program was building marketing lists with information that was obtained from various sources, including information about our shopping habits gleaned from envelopes and packages that the postal service delivers to our homes.

We believe that Canadians are largely unaware that this is happening.

We found that this did not comply with privacy law and that Canada Post is required to seek and obtain authorization from Canadians before gathering and using their personal information for marketing purposes.

The law does not provide my Office with order-making powers and therefore I continue to recommend that Canada Post stops using and disclosing personal information that is taken from its mail operation for marketing activities until it has sought and obtained Canadians’ authorization.

I call upon Canada Post to reconsider its position. In the meantime, Canadians who do not wish to have their personal information used in this way can go to Canada Post’s website and search for “remove my name and address from advertising lists,” which will bring them to a form allowing them to opt out.