BreachOfPrivacy
Decisions/Federal (Canada)/Personal Information Protection and Electronic Documents Act/Early resolved case summary #10: Bank improves its credit card account verification practices after challenge from customer - February 20, 2014
Office of the Privacy Commissioner of CanadaPersonal Information Protection and Electronic Documents ActEarly resolved case summary #10Resolved
Flag of Canada

Early resolved case summary #10: Bank improves its credit card account verification practices after challenge from customer - February 20, 2014

Organization: A bankComplainant: An individual
Decision: Feb 20, 2014Published: Feb 20, 2014

An individual complained that her bank required her to provide the last six digits of her Social Insurance Number (SIN) to set up a verified credit account for online purchases. The complainant believed this collection was unnecessary and sought an alternative. The bank initially maintained its practice but, after being informed of a similar OPC finding regarding transparency, discontinued the practice and updated its website to remove this authentication method. The complaint was resolved.

  • Bank's collection of partial SIN for account verification
  • Transparency of alternative authentication methods
  • Adequacy of information provided on the bank's website

Complaint resolved through improved practices

The bank discontinued its practice of collecting partial SINs for account verification and updated its website to reflect this change after the OPC brought a similar finding on transparency to its attention. The complainant accepted this resolution.

AI-generated summary for reference only. Always verify against the official decision ↗

Recommended action / remedy

The bank discontinued the practice of using partial SINs for authentication and updated its website.

Statutory provisions cited
  • PIPEDA

This summary is informational only and not legal advice.