Language selection

Search

Investigations into businesses

The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.

For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.

For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.

Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.

Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].

Sort by date / Sort by relevance
Settled case summary #21

Loyalty program inadvertently markets to child members (July 24, 2006)

...Loyalty program inadvertently markets to child members Settled Case summary #21: Loyalty program inadvertently markets to child members (July 24, 2006) Loyalty program inadvertently markets to child... complained that a loyalty program in which his children were members had given the children’s names...

Date of findings:
PIPEDA Report of Findings #2009-008

Report of Findings: CIPPIC v. Facebook Inc.

PIPEDA Report of Findings: Complaint Filed by the Canadian Internet Policy and Public Interest Clinic (CIPPIC) against Facebook Inc. under PIPEDA.

..., the task force identifies, evaluates, and proposes solutions for online risks for children and youth... to make SNSs safer for European youth. In conjunction with the agreement, the European Commission issued... identifiable information from children under 13 without verifiable parental consent. In requesting...

Date of findings:
PIPEDA Report of Findings #2018-004

Microsoft to obtain opt-in consent, enhance transparency for Windows 10 privacy settings

PIPEDA Report of Findings: Microsoft to obtain opt-in consent, enhance transparency for Windows 10 privacy settings

Date of findings:
PIPEDA findings #2021-002

Investigation into CoreFour Inc.’s compliance with PIPEDA

...and its direct relationship with students and parents, including the complainant and his children... The respondent collects and retains significant personal information of children such as student names, dates... is predominantly about individuals that comprise a vulnerable group: from young children attending...

Date of findings:
PIPEDA Report of Findings #2018-001

Connected toy manufacturer improves safeguards to adequately protect children’s information

PIPEDA Report of Findings: Connected toy manufacturer improves safeguards to adequately protect children’s information

...for children); and (iii) Kid Connect (an app that allows children and parents to exchange voice... of over 316,000 Canadian children (e.g., name, gender, DOB, profile pictures, voice recordings and logs... parents associated with those children (e.g., name, email, IP and mailing address). The affected...

Date of findings:
PIPEDA Executive Summary #2008-389

Law School Admission Council Investigation

Executive Summary - Law School Admission Council Investigation

...#2008-389 May 29, 2008 Report of Findings A complainant objected to the requirement that students... presence in LSAC’s governance structure; students in Canada may pay their registration in Canadian funds... requirement. At the time of registration, the student is given an admission ticket to bring to...

Date of findings:
Settled case summary #19

SIN not required when signing apartment lease (February 3, 2006)

..., 2006) Settled case summary #19 Settled case summary #19 Complaint A student complained... instituted as a result of his complaint, the student and the Office considered the matter to be settled....

Date of findings:
PIPEDA findings #2019-007

Credit reporting agency is authorized to rely on exemption to consent in disclosing credit information to Statistics Canada

...a debt for an unpaid student loan that he had obtained through the Government of Canada 24 years... his outstanding student loan debt. The respondent contended that section 17 of the Statistics Act imposes... for unpaid students loans. We note that this matter relates more directly to the actions of Statistics...

Date of findings:
PIPEDA findings #2024-001

Investigation into Aylo (formerly MindGeek)’s Compliance with PIPEDA

...In particular, on December 2, 2020, the New York Times published an opinion piece, “The Children... that MindGeek allowed the upload of child sexual abuse material (“CSAM”) and non-consensual...

Settled case summary #28

DVD-rental store revises membership application process (December 14, 2006)

...a military card; student card; gym membership card; and, if the customer volunteers it, a health card...

Date of findings:

Showing items 1 through 10 of 20.

Filter these results

Search by key word or choose from the filter options below to narrow the results.


Dispositions

Complaint Types

Sectors

Topics

Principles

Date of Findings


Date modified: