PIPEDA Case Summary #2003-243 — telecommunications company "B"
An individual complained that a telecommunications company failed to obtain adequate consent for the secondary marketing use and disclosure of customer data. The investigation found that the company's privacy code, policy, and customer activation process sufficiently informed customers of its marketing practices and their right to opt-out. The company also complied with CRTC restrictions on disclosing customer information. As a result, the Assistant Privacy Commissioner concluded that the company was in compliance with PIPEDA.
- Adequacy of consent for secondary marketing purposes
- Clarity and accessibility of privacy policies
- Company's process for informing customers of data use and opt-out options
Complaint not well-founded
The Assistant Privacy Commissioner found that the company made reasonable efforts to inform customers of secondary marketing purposes and their opt-out rights, and that customers could reasonably understand and consent to these practices, thus complying with PIPEDA.
AI-generated summary for reference only. Always verify against the official decision ↗
- Principle 4.3 PIPEDA
- Principle 4.2.3 PIPEDA
- Principle 4.3.2 PIPEDA
- Principle 4.3.4 PIPEDA
- Principle 4.3.5 PIPEDA
This summary is informational only and not legal advice.