Language selection

OPC Logo Office of the Privacy Commissioner of Canada

Search

Investigations into businesses

The Office of the Privacy Commissioner of Canada (OPC) conducts independent and impartial investigations into the personal information handling practices of businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

The OPC publishes a selection of case summaries and findings from its investigations to provide concrete examples of how PIPEDA applies to the day-to-day management of personal information by businesses.

For each case, the Office indicates the outcome using a set of defined terms for findings and dispositions.

For more information about the complaint and investigation process, read How the OPC Enforces PIPEDA.

Note: Complainants are not named in the summaries or reports. The organizations are not identified unless the Privacy Commissioner of Canada has deemed it to be in the public interest to do so.

Disclaimer: Typographical errors have been corrected from the original version of the report of findings. They are indicated in [brackets].

PIPEDA findings #2024-002

Investigation into Brinks Home

Date of findings:
PIPEDA findings #2024-001

Investigation into Aylo (formerly MindGeek)’s Compliance with PIPEDA

PIPEDA findings #2023-002

Investigation into Agronomy’s privacy practices related to safeguards, accountability valid consent for the collection and use of personal information

Date of findings:
PIPEDA findings #2021-009

Opt-in consent required for a donor list trading program

Date of findings:
PIPEDA findings #2023-001

Investigation into Home Depot of Canada Inc.’s compliance with PIPEDA

Date of findings:
PIPEDA findings #2022-006

Investigation into Trimac’s use of an audio and video surveillance device in its truck cabins

Date of findings:
PIPEDA findings #2022-005

Hotel chain discovers breach of customer database following acquisition of a competitor

Date of findings:
PIPEDA findings #2022-004

Investigation into MGM breach highlights how to assess risk, and need for timely assessment

Date of findings:
PIPEDA findings #2022-003

Telecommunications firm failed to obtain appropriate consent for voiceprint authentication program

Date of findings:
PIPEDA findings #2021-008

Transportation company's constant surveillance of drivers is more intrusive than necessary

Date of findings:

Showing items 1 through 10 of 158.

Filter these results

Search by key word or choose from the filter options below to narrow the results.

Dispositions

Complaint Types

Sectors

Topics

Principles

Date of Findings
Date modified: