
Commissioner’s Findings - PIPEDA Report of Findings #2014-012: Investment Firm Justified in its Collection of "Know Your Client" Information
A customer complained that his investment firm's Know Your Client (KYC) form required an unreasonable amount of personal information, contrary to PIPEDA. The firm argued the information was necessary to comply with regulatory obligations set by the Investment Industry Regulatory Organization of Canada (IIROC). The OPC investigated whether the firm collected more information than necessary for legitimate purposes. Ultimately, the OPC found that the firm's collection of detailed financial and personal information, including spousal income and investment experience, was justified to meet IIROC's KYC and suitability requirements.
- Whether the investment firm explicitly specified the purposes for collecting personal information.
- Whether the stated purposes for collection were legitimate.
- Whether the firm collected more personal information than necessary to fulfill those purposes.
- Whether the collection was a condition of service that violated PIPEDA.
Complaint not well-founded
The Office of the Privacy Commissioner of Canada (OPC) determined that the investment firm had explicitly specified legitimate purposes for collecting the information, namely compliance with IIROC's KYC and suitability requirements. The OPC further found that the detailed information collected, including spousal income and investment experience, was necessary to meet these regulatory obligations and therefore not excessive.
AI-generated summary for reference only. Always verify against the official decision ↗
- Principle 4.3.3 PIPEDA
- Principle 4.2 PIPEDA
- Principle 4.4 PIPEDA
- s.5(3) PIPEDA
This summary is for informational purposes only and does not constitute legal advice.

