BreachOfPrivacy
Decisions/Federal (Canada)/Personal Information Protection and Electronic Documents Act/Commissioner’s Findings - PIPEDA Report of Findings #2013-003: Profiles on PositiveSingles.com dating website turn up on other affiliated dating websites
Office of the Privacy Commissioner of CanadaPersonal Information Protection and Electronic Documents ActCommissioner’s Findings - PIPEDA Report of Findings #2013-003Well-founded & resolved
Flag of Canada

Commissioner’s Findings - PIPEDA Report of Findings #2013-003: Profiles on PositiveSingles.com dating website turn up on other affiliated dating websites

Organization: PositiveSingles.com
Decision: Jul 11, 2013Published: Jul 11, 2013

Three individuals complained after discovering their sensitive dating profiles, posted on PositiveSingles.com, appeared on nearly 60 other affiliated dating websites without their knowledge or consent. The Office of the Privacy Commissioner of Canada found that while the profiles remained within the company's controlled network, users were not adequately informed about this practice. Furthermore, inadequate safeguards allowed some personal information to be accessed by non-members. The organization revamped its website to provide clearer disclosures about profile sharing and its network structure, and improved its security measures.

  • Adequacy of consent for the use and disclosure of personal information across affiliated websites.
  • Whether users were adequately informed about the company's network structure and profile sharing practices.
  • Sufficiency of security safeguards to prevent unauthorized access to personal information.
  • Transparency of privacy policies and practices regarding data management.

Complaint well-founded and resolved.

The Commissioner found that users had not provided meaningful consent for their sensitive personal information to be used across the network of affiliated websites, nor had the organization been sufficiently open about its practices. Safeguards were also found to be inadequate. Following recommendations, the organization made significant changes to its disclosure and security practices, leading to the resolution of the complaint.

AI-generated summary for reference only. Always verify against the official decision ↗

Recommended action / remedy

The website network was revamped to explicitly inform users of the relationship between the parent company and affiliated websites, provide clearer notification before profile posting for informed consent, and ensure no disclosures of personal information to exterior third parties.

Statutory provisions cited
  • Principle 4.3 PIPEDA
  • Principle 4.3.2 PIPEDA
  • Principle 4.3.5 PIPEDA
  • Principle 4.3.6 PIPEDA
  • Principle 4.7 PIPEDA
  • Principle 4.7.1 PIPEDA
  • Principle 4.8 PIPEDA
  • Principle 4.8.1 PIPEDA

This summary is informational only and not legal advice.