BreachOfPrivacy
Decisions/Federal (Canada)/Personal Information Protection and Electronic Documents Act/Commissioner’s Findings - PIPEDA Report of Findings #2013-002: Bank misinformed client of purpose of requesting personal information for picking up credit card
Office of the Privacy Commissioner of CanadaPersonal Information Protection and Electronic Documents ActCommissioner’s Findings - PIPEDA Report of Findings #2013-002Well-founded & resolved
Flag of Canada

Commissioner’s Findings - PIPEDA Report of Findings #2013-002: Bank misinformed client of purpose of requesting personal information for picking up credit card

Organization: A bank
Decision: Apr 15, 2013Published: Apr 15, 2013

A bank customer complained that the bank improperly demanded to record information from his driver's license when picking up a replacement credit card. The bank initially claimed this was for anti-money laundering purposes, but later admitted this explanation was incorrect. The Office found the demand for information was not well-founded as no information was actually collected. However, the bank contravened PIPEDA by misinforming the customer about the purpose of the collection, a contravention that was resolved by revised bank procedures and staff training.

  • Whether the bank limited the collection of personal information to what was necessary.
  • Whether the bank's employees could explain the purposes for collecting personal information.

Complaint regarding collection not well-founded; complaint regarding identifying purposes well-founded and resolved.

The collection was not deemed a contravention as the personal information was not actually collected. However, the bank contravened Principle 4.2.5 by providing inaccurate reasons for requesting the driver's license information.

AI-generated summary for reference only. Always verify against the official decision ↗

Recommended action / remedy

The bank revised its credit card pickup procedures and circulated this information to staff to ensure employees can accurately explain the purposes of information collection.

Statutory provisions cited
  • Principle 4.4 PIPEDA
  • Principle 4.2.5 PIPEDA

This summary is for informational purposes only and does not constitute legal advice.