PIPEDA Case Summary #2003-244 — Telecommunications company "A"
An individual complained that a telecommunications company failed to obtain proper consent for using and sharing customer data with affiliates for secondary marketing purposes. The company made its privacy policy available online and in distributed documents, but did not actively draw customers' attention to it during the sign-up process, making the information difficult to find. The Assistant Privacy Commissioner found that the company did not make reasonable efforts to inform customers about how their data would be used, leading to a contravention of PIPEDA principles regarding knowledge and consent for secondary uses of personal information.
- Adequacy of consent for secondary marketing purposes
- Company's efforts to inform customers of privacy practices
- Accessibility and clarity of privacy policy information
- Reasonable expectations of customers regarding data use
Complaint well-founded — company ordered to improve customer notification practices
The telecommunications company failed to make reasonable efforts to ensure its customers were aware of its privacy practices and the purposes for which their information would be used, particularly for secondary marketing. The company's privacy documents were not indexed and not actively brought to the attention of new customers during the sign-up process.
AI-generated summary for reference only. Always verify against the official decision ↗
The company was recommended to draw customers' attention to its policy statement regarding the purposes for collecting personal information and customer options at the time of collection during the subscription or purchasing process.
- Principle 4.2.3 PIPEDA
- Principle 4.3 PIPEDA
- Principle 4.3.2 PIPEDA
- Principle 4.3.4 PIPEDA
- Principle 4.3.5 PIPEDA
This is a summary for informational purposes only and does not constitute legal advice.